Overview

overview

10

Static

static

7

f46fcb7792...df.exe

windows7-x64

10

f46fcb7792...df.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f46fcb7792d4bea5b327fbe12e2ae77ef59537797f15ef38fc9288f0065a83df

  • Size

    13.2MB

  • Sample

    230819-zhj7wscc67

  • MD5

    35751cc518d036bf8762ebc8d20bb49f

  • SHA1

    5d9b98dff6659e60ac26257f156d6f4e1f87fddd

  • SHA256

    f46fcb7792d4bea5b327fbe12e2ae77ef59537797f15ef38fc9288f0065a83df

  • SHA512

    c142449cc0fa331b283e769527fd724c573fff07859bfeccea841aa47c79ee00f4fa2aac025242b65db3d1ec85f3f3c3cfe9bf839a7d68481442978550e0af90

  • SSDEEP

    196608:XdsNbBJuwypFo2ZS8E2Gc5fofEGMNo1DzoLh+2ebIkHNVJG7OfrOZx3VaG8VE9Ob:X2NtGzFfS5Vol+2ebImNvJfi5aGlO

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      f46fcb7792d4bea5b327fbe12e2ae77ef59537797f15ef38fc9288f0065a83df

    • Size

      13.2MB

    • MD5

      35751cc518d036bf8762ebc8d20bb49f

    • SHA1

      5d9b98dff6659e60ac26257f156d6f4e1f87fddd

    • SHA256

      f46fcb7792d4bea5b327fbe12e2ae77ef59537797f15ef38fc9288f0065a83df

    • SHA512

      c142449cc0fa331b283e769527fd724c573fff07859bfeccea841aa47c79ee00f4fa2aac025242b65db3d1ec85f3f3c3cfe9bf839a7d68481442978550e0af90

    • SSDEEP

      196608:XdsNbBJuwypFo2ZS8E2Gc5fofEGMNo1DzoLh+2ebIkHNVJG7OfrOZx3VaG8VE9Ob:X2NtGzFfS5Vol+2ebImNvJfi5aGlO

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks