Overview

overview

10

Static

static

3

ac3427df98...24.exe

windows7-x64

10

ac3427df98...24.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac3427df9855afcd29f5a85573e3e32437ee2695e2e4d456889bb594e6068924

  • Size

    588KB

  • Sample

    231116-w913yaef75

  • MD5

    8da6eae3abead9c41bd1b65fb48b9c28

  • SHA1

    69967c083a4cf05361d7b1c3cae06844d40dcb66

  • SHA256

    ac3427df9855afcd29f5a85573e3e32437ee2695e2e4d456889bb594e6068924

  • SHA512

    7ae582e4bd279c1733ac991b5d0fe5c8b22f7589abd1792fdae02442065b122f6d1fa48f60766329113731751d31b5f88234e451fb2377fd32707fe6184e9cff

  • SSDEEP

    12288:Or+Cu0Q5PuhoVncbfF0fHx8QdB/NtfakNp8z2uDpTKubP4ofC0yqCt:Or+5dnncbfSfRvdDtfa8uDtUYZCt

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      ac3427df9855afcd29f5a85573e3e32437ee2695e2e4d456889bb594e6068924

    • Size

      588KB

    • MD5

      8da6eae3abead9c41bd1b65fb48b9c28

    • SHA1

      69967c083a4cf05361d7b1c3cae06844d40dcb66

    • SHA256

      ac3427df9855afcd29f5a85573e3e32437ee2695e2e4d456889bb594e6068924

    • SHA512

      7ae582e4bd279c1733ac991b5d0fe5c8b22f7589abd1792fdae02442065b122f6d1fa48f60766329113731751d31b5f88234e451fb2377fd32707fe6184e9cff

    • SSDEEP

      12288:Or+Cu0Q5PuhoVncbfF0fHx8QdB/NtfakNp8z2uDpTKubP4ofC0yqCt:Or+5dnncbfSfRvdDtfa8uDtUYZCt

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks