Overview

overview

10

Static

static

3

9c6bdc6db4...f7.exe

windows7-x64

10

9c6bdc6db4...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7

  • Size

    5.3MB

  • Sample

    231009-ps1yaaeh82

  • MD5

    1d2715694fe50a9ded28f50f4288b696

  • SHA1

    d0ca0183b78ec03dd38ee393f6d4c0539afd57f1

  • SHA256

    9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7

  • SHA512

    7fd1aabfa7a4c71da49e6d95a853f1a8b531ea8de2ca63bcb245cf4e5549ef1f019edb30fcda30e006b28db1844f69ee283be9b3bfa43084cc7a5d2bd19b9a44

  • SSDEEP

    98304:xIZyMfdsowCw+yIM+5imauM5HNnJbzAJ/1ucUYdl1r//Db7aMUewtt9P8053:ElsotX8IIZJPAPucLdlNfwt/Pn

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7

    • Size

      5.3MB

    • MD5

      1d2715694fe50a9ded28f50f4288b696

    • SHA1

      d0ca0183b78ec03dd38ee393f6d4c0539afd57f1

    • SHA256

      9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7

    • SHA512

      7fd1aabfa7a4c71da49e6d95a853f1a8b531ea8de2ca63bcb245cf4e5549ef1f019edb30fcda30e006b28db1844f69ee283be9b3bfa43084cc7a5d2bd19b9a44

    • SSDEEP

      98304:xIZyMfdsowCw+yIM+5imauM5HNnJbzAJ/1ucUYdl1r//Db7aMUewtt9P8053:ElsotX8IIZJPAPucLdlNfwt/Pn

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks