Overview

overview

10

Static

static

3

cb85e2e646...fc.exe

windows7-x64

10

cb85e2e646...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc

  • Size

    3.4MB

  • Sample

    231016-qjppbsfc7v

  • MD5

    bb909942e40f03885dcfb532fd46b345

  • SHA1

    60ecd4629e8c6d55d74fe3ac3c7a0be888cdb3bb

  • SHA256

    cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc

  • SHA512

    7a626abafb5e509e35de24461746125a5a8eaad2ef943f3b63b16b70707f426d8416b8e5d8978e5baf51fb276e6db576c78149e7121cdf2c8e1238755c5c8bdb

  • SSDEEP

    98304:o3yEMCSpHX0QstYMi2kGI7UrCpoGj6c7gn82Ywt:VEM/pQtYX2kDQWow68uYwt

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc

    • Size

      3.4MB

    • MD5

      bb909942e40f03885dcfb532fd46b345

    • SHA1

      60ecd4629e8c6d55d74fe3ac3c7a0be888cdb3bb

    • SHA256

      cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc

    • SHA512

      7a626abafb5e509e35de24461746125a5a8eaad2ef943f3b63b16b70707f426d8416b8e5d8978e5baf51fb276e6db576c78149e7121cdf2c8e1238755c5c8bdb

    • SSDEEP

      98304:o3yEMCSpHX0QstYMi2kGI7UrCpoGj6c7gn82Ywt:VEM/pQtYX2kDQWow68uYwt

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks