Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 05:07
General
-
Target
56aecc8bb9986933c2f1b4d4146bd6cc.exe
-
Size
1.2MB
-
MD5
56aecc8bb9986933c2f1b4d4146bd6cc
-
SHA1
25f643f0d551f315d7a3f1372e5ca5418fb52af1
-
SHA256
791b752a7bd8706faf6248e0dde6efee47ac3adc8826d8c080991abc647fc04c
-
SHA512
7749188fa0fbefc8a31ee262158a940b07cb417c7f015a72ebfb9c9b504fd814887405b071d56e5fadb65e8e9f55cd644e6bbaefea4b97358150135a54d449cb
-
SSDEEP
24576:vBsDyuX5UCS4lny4mCN946FnMtk9RsVb+s2H3U0MrNHs+Uv:vG1Xw4ZFmCrnMaYb+THBwBs+U
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\56aecc8bb9986933c2f1b4d4146bd6cc.exe"C:\Users\Admin\AppData\Local\Temp\56aecc8bb9986933c2f1b4d4146bd6cc.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB