Overview

overview

10

Static

static

3

2e40543af5...83.exe

windows7-x64

10

2e40543af5...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e40543af5e4426b492bbec01d51bd93413e5a43d0766a2a5e1a0a7372a4b683

  • Size

    15.5MB

  • Sample

    231010-ec8yvacf89

  • MD5

    572be003c98d4201171c6d51182b32c2

  • SHA1

    0bdd989d23f38b3622feff4246ad8fdebbef40a2

  • SHA256

    2e40543af5e4426b492bbec01d51bd93413e5a43d0766a2a5e1a0a7372a4b683

  • SHA512

    720106a12165d9c915dd459d37e1a8a93dd44a542e77621ee43ec4f43b583364188b825f8046d8c056399bcfd81d98e225350cd2704660091121afc7ba66c70e

  • SSDEEP

    393216:W4Qnm1G8u4STt9RkIUrRMEyYqNgBJDZRDgtwFaWybadDGyqc:1Qm7YtFEyZmDxFaWuatGG

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      2e40543af5e4426b492bbec01d51bd93413e5a43d0766a2a5e1a0a7372a4b683

    • Size

      15.5MB

    • MD5

      572be003c98d4201171c6d51182b32c2

    • SHA1

      0bdd989d23f38b3622feff4246ad8fdebbef40a2

    • SHA256

      2e40543af5e4426b492bbec01d51bd93413e5a43d0766a2a5e1a0a7372a4b683

    • SHA512

      720106a12165d9c915dd459d37e1a8a93dd44a542e77621ee43ec4f43b583364188b825f8046d8c056399bcfd81d98e225350cd2704660091121afc7ba66c70e

    • SSDEEP

      393216:W4Qnm1G8u4STt9RkIUrRMEyYqNgBJDZRDgtwFaWybadDGyqc:1Qm7YtFEyZmDxFaWuatGG

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Drops file in Drivers directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks