Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
08-10-2023 20:57
General
-
Target
2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64.exe
-
Size
265KB
-
MD5
76813fa398ecb66c14b98c38b74fac6f
-
SHA1
b7ea332f2c95e78f30b8eb185b1ab535045b6e4b
-
SHA256
2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64
-
SHA512
62a5f5d2a545f5f23f637d3cf41de5316ae49ac65ce961e6959478aa3afd413436a9b0ca5465999cea7c0d8c98f82a30af45ce87dfcd99cda8c93c67b3695f97
-
SSDEEP
6144:BCHYI8JFpdeVd3IIShqRm3a2AjcEYEhIU/FO/:BCHIJ6d3VQ3ejcOU
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64.exe"C:\Users\Admin\AppData\Local\Temp\2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
128KB
-
Filesize
256KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
936KB
-
Filesize
1.1MB
-
Filesize
256KB
-
Filesize
128KB