Overview

overview

10

Static

static

10

5cd0a6d02e...95.exe

windows7-x64

10

5cd0a6d02e...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cd0a6d02e0e90e3b213e20af89a24a1c3dae3775f4e528e41ef81f39ae33295

  • Size

    4.9MB

  • Sample

    231012-fvq2esbb82

  • MD5

    fcf4b4787ca922321eb6719a2456ac13

  • SHA1

    dab858ece8b756cd36b08d2e3446d80a83e53167

  • SHA256

    5cd0a6d02e0e90e3b213e20af89a24a1c3dae3775f4e528e41ef81f39ae33295

  • SHA512

    45a5234ce8a937cd7183a84a0dd42fbac4f0fb7a53d2431be19e29477fabf4429fbb918bec99ddca1aac0a3c141825d89c0b5f6d7c857f9c764b93aaa838bc95

  • SSDEEP

    98304:bBWZ1ddxgEkuRVRQTB00dh9zw7PVC0qP:60Ek4aTy0LmP

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      5cd0a6d02e0e90e3b213e20af89a24a1c3dae3775f4e528e41ef81f39ae33295

    • Size

      4.9MB

    • MD5

      fcf4b4787ca922321eb6719a2456ac13

    • SHA1

      dab858ece8b756cd36b08d2e3446d80a83e53167

    • SHA256

      5cd0a6d02e0e90e3b213e20af89a24a1c3dae3775f4e528e41ef81f39ae33295

    • SHA512

      45a5234ce8a937cd7183a84a0dd42fbac4f0fb7a53d2431be19e29477fabf4429fbb918bec99ddca1aac0a3c141825d89c0b5f6d7c857f9c764b93aaa838bc95

    • SSDEEP

      98304:bBWZ1ddxgEkuRVRQTB00dh9zw7PVC0qP:60Ek4aTy0LmP

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks