Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
-
submitted
28/10/2023, 19:26
General
-
Target
c2209697fccff0d07f6f9b80cb9581f19bb8c68220a4d8f01a378c766270cd0a.exe
-
Size
185KB
-
MD5
fe2cebee0dfbae482f46e693bbc451bf
-
SHA1
2a8e6e73706ef94b52681c5ae156504daa629589
-
SHA256
c2209697fccff0d07f6f9b80cb9581f19bb8c68220a4d8f01a378c766270cd0a
-
SHA512
4d52dcb5b93650457570cfa72bf5a0a1bd9752cb1b813269e4132b2303d91b3519158859fb327d7f0f332d1f96eb9062f3e297a2abceb7b736aaa31453744b6e
-
SSDEEP
3072:FlyCWX6fkKuRR6gLKVBIERq7cbo32DgjUikZBJOtO1XI3pmAqFueZcKP+VGrtfra:PBdktvObRqlWg2BJdwwAqFueZc2+gxtM
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
Downloads MZ/PE file
-
Drops file in Drivers directory 8 IoCs
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c2209697fccff0d07f6f9b80cb9581f19bb8c68220a4d8f01a378c766270cd0a.exe"C:\Users\Admin\AppData\Local\Temp\c2209697fccff0d07f6f9b80cb9581f19bb8c68220a4d8f01a378c766270cd0a.exe"1⤵
- Drops file in Drivers directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
MD5f8884a2874a0abe17a0bde15549ea4be
SHA1f28ab00af36d4c5e19db1c891db9c4e24492c316
SHA25646903b9e202d31a99221ec63d453b2a5a61d474d2dc94fcf85a88b56e2435a49
SHA512cf15b839ceed22d4b31cec1a7e458498833780b7971951999212da5ff879f27cbc434680542685e8622d1f42615bb955632895db16a8d63e7c28e1765936e5b7
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
340KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
580KB
-
Filesize
156KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
580KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
340KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
156KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
580KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB