Overview

overview

10

Static

static

10

2024-01-09...id.exe

windows7-x64

10

2024-01-09...id.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-09_173cdc9f28e08e98a28dff0cf095caad_icedid

  • Size

    2.8MB

  • Sample

    240110-gjsxbafacm

  • MD5

    173cdc9f28e08e98a28dff0cf095caad

  • SHA1

    96f8d63e3ebac1440f8b116f437201ed1b58d23a

  • SHA256

    b46732003eef908cee772ea3a65d7fb7e01232ed0ebf37c80f63514e434c1470

  • SHA512

    fb5f394889f9dcbfb32513c78ea000fed42f050911122ac3a0a71605c2548351338aa3c8d354c10f7b0adf47f8911c143bb5cf39727e23659c6321ed413f1c89

  • SSDEEP

    24576:wl18GADX15DihL9GVRqIERogW68ngSTeTm8HZfj4cCao6A6u2EmAOuydnTX2tui5:wO7SL9eq67ydBC/S2mpTnT

Score
10/10
blackmoonprivateloaderbankerevasionloaderpersistencetrojan

Malware Config

Targets

    • Target

      2024-01-09_173cdc9f28e08e98a28dff0cf095caad_icedid

    • Size

      2.8MB

    • MD5

      173cdc9f28e08e98a28dff0cf095caad

    • SHA1

      96f8d63e3ebac1440f8b116f437201ed1b58d23a

    • SHA256

      b46732003eef908cee772ea3a65d7fb7e01232ed0ebf37c80f63514e434c1470

    • SHA512

      fb5f394889f9dcbfb32513c78ea000fed42f050911122ac3a0a71605c2548351338aa3c8d354c10f7b0adf47f8911c143bb5cf39727e23659c6321ed413f1c89

    • SSDEEP

      24576:wl18GADX15DihL9GVRqIERogW68ngSTeTm8HZfj4cCao6A6u2EmAOuydnTX2tui5:wO7SL9eq67ydBC/S2mpTnT

    Score
    10/10
    blackmoonbankerevasionpersistencetrojanprivateloaderloader

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Sets service image path in registry

      persistence

    • Stops running service(s)

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks