Analysis
-
max time kernel
25s -
max time network
24s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 15:06
General
-
Target
05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db.exe
-
Size
484KB
-
MD5
265f9744bc871ecbac1f576b53fc4b70
-
SHA1
2e28afaff34a36af22c4081473ddd67e22da2b22
-
SHA256
05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db
-
SHA512
4242273ac84ceaa19dba0e98868739d04dd0a3c29c43007d8ad3bcd72173536e9544685097b1bb619d52ffb9707b8189f9991122931c62efdc8074e2499bfab8
-
SSDEEP
12288:m667NO5rh27dVAxZfIjpXxgBLeE8tRc5kDUkLLwbpcRGI:mB7E5VcQZf82hezc5ZkLLwbmb
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies registry class 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db.exe"C:\Users\Admin\AppData\Local\Temp\05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db.exe"1⤵
- Modifies registry class
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
936KB
-
Filesize
936KB