Overview

overview

10

Static

static

7

SecuriteIn...13.exe

windows7-x64

10

SecuriteIn...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    [email protected]

  • Size

    4.3MB

  • Sample

    231022-t6h2vace75

  • MD5

    83da3b0418f749cbcddf380af9f8cf54

  • SHA1

    740625c8a4b8972a42cf9e22c7afc8a0dc0d167e

  • SHA256

    5539c24148a8f4348b44705e441fb22b74dad47072cf17faa8593350bbe514dc

  • SHA512

    8fc5f82dbfccce9351e530c2f99db459052bbf5fd7b0659b27ff1f033d07f056bcc20d1280de973c3c95a76f717208124989bf806326e8cb74ac4b8be77e9306

  • SSDEEP

    98304:ibcEfTZlGjsEom3NagAIlR7TwJgH2s4Vx6OocoFSf6Q375FC:ibcEfN4gcMc7QO2heFcoFSfp7r

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      [email protected]

    • Size

      4.3MB

    • MD5

      83da3b0418f749cbcddf380af9f8cf54

    • SHA1

      740625c8a4b8972a42cf9e22c7afc8a0dc0d167e

    • SHA256

      5539c24148a8f4348b44705e441fb22b74dad47072cf17faa8593350bbe514dc

    • SHA512

      8fc5f82dbfccce9351e530c2f99db459052bbf5fd7b0659b27ff1f033d07f056bcc20d1280de973c3c95a76f717208124989bf806326e8cb74ac4b8be77e9306

    • SSDEEP

      98304:ibcEfTZlGjsEom3NagAIlR7TwJgH2s4Vx6OocoFSf6Q375FC:ibcEfN4gcMc7QO2heFcoFSfp7r

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks