Overview

overview

10

Static

static

3

7c98624e01...85.exe

windows7-x64

10

7c98624e01...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c98624e010d406cf504d6465edad1c2b1441457976bfb2373bec9f666e8af85

  • Size

    588KB

  • Sample

    231011-ln1j6sgd77

  • MD5

    15fba5e58f1349817ca1ac2d55fd2e58

  • SHA1

    e75aa89e91613d836cde955fd0372972fd4fbc34

  • SHA256

    7c98624e010d406cf504d6465edad1c2b1441457976bfb2373bec9f666e8af85

  • SHA512

    d2ca664291bb241da54e34a4ca2f72d7bccc94eeea80cc13ea6be26c8642ddadf4cdc5e6b2bca1ee212825ad6c4c5717fbd55f8fe00b495efeab71c5aa487c9f

  • SSDEEP

    12288:Or+Cu0Q5PuhoVncbfF0fHx8QdB/NtfakNp8z2uDpTKubP4ofC0yqCs:Or+5dnncbfSfRvdDtfa8uDtUYZCs

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      7c98624e010d406cf504d6465edad1c2b1441457976bfb2373bec9f666e8af85

    • Size

      588KB

    • MD5

      15fba5e58f1349817ca1ac2d55fd2e58

    • SHA1

      e75aa89e91613d836cde955fd0372972fd4fbc34

    • SHA256

      7c98624e010d406cf504d6465edad1c2b1441457976bfb2373bec9f666e8af85

    • SHA512

      d2ca664291bb241da54e34a4ca2f72d7bccc94eeea80cc13ea6be26c8642ddadf4cdc5e6b2bca1ee212825ad6c4c5717fbd55f8fe00b495efeab71c5aa487c9f

    • SSDEEP

      12288:Or+Cu0Q5PuhoVncbfF0fHx8QdB/NtfakNp8z2uDpTKubP4ofC0yqCs:Or+5dnncbfSfRvdDtfa8uDtUYZCs

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks