Overview

overview

10

Static

static

3

5aa73af1f4...86.exe

windows7-x64

10

5aa73af1f4...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5aa73af1f46c8fb94620c5ad326e534f634deb3c8f166e29ff56970d8b096e86

  • Size

    7.3MB

  • Sample

    230904-n1k2csgd26

  • MD5

    9a886d5832674a83ed312c09410625b1

  • SHA1

    c7f23edf4e52b70b52794b5fe68fc88322888d8b

  • SHA256

    5aa73af1f46c8fb94620c5ad326e534f634deb3c8f166e29ff56970d8b096e86

  • SHA512

    4a07a5b24dce4d2f6ef6e035eb5646ef06b3819563d7fd55c4b08361f4f64d2a365c120f081fa51f6050027b9463ac0b5e63b15e4824603105c728f81b8d7e3e

  • SSDEEP

    196608:ZJw+oDkc1GaCDuF9jxMxhiRl7DFBc4bq:A+oDkJKFiyjbb

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      5aa73af1f46c8fb94620c5ad326e534f634deb3c8f166e29ff56970d8b096e86

    • Size

      7.3MB

    • MD5

      9a886d5832674a83ed312c09410625b1

    • SHA1

      c7f23edf4e52b70b52794b5fe68fc88322888d8b

    • SHA256

      5aa73af1f46c8fb94620c5ad326e534f634deb3c8f166e29ff56970d8b096e86

    • SHA512

      4a07a5b24dce4d2f6ef6e035eb5646ef06b3819563d7fd55c4b08361f4f64d2a365c120f081fa51f6050027b9463ac0b5e63b15e4824603105c728f81b8d7e3e

    • SSDEEP

      196608:ZJw+oDkc1GaCDuF9jxMxhiRl7DFBc4bq:A+oDkJKFiyjbb

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks