Overview

overview

10

Static

static

10

TK014DCC96..._P.exe

windows10-1703-x64

10

TK014DCC96..._P.exe

windows10-2004-x64

10

TK014DCC96..._P.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    TK014DCC9651DB453FB3D969CBD4E397_P.exe

  • Size

    19.4MB

  • Sample

    240309-t79k7adb31

  • MD5

    856cde622a9a5f5f5ac3c0414dedf113

  • SHA1

    3f3fb2b95d557aee8b5478dbb8d7620e95bf2ef4

  • SHA256

    223d98ec145c21ce9ff222008bd9ee02a8aaa146600972bf806708d9d689bef1

  • SHA512

    c527d53823b7c191bbcd8be9da6863fb16d615dc9d58d97a2de50ec1e59bb0c022d5bffe957cddf7eb368e60512d40e2d5eb88b52220abed128a3fe0e9b05ba7

  • SSDEEP

    393216:dMQgUTcSyvrTV6cjQP6uOX1r3clzzSefpaFTCHLafb4DjZ539a+24EWI84goJ:drgedyvHV6cjkTO+BvfSHfb4DjZ59a+a

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      TK014DCC9651DB453FB3D969CBD4E397_P.exe

    • Size

      19.4MB

    • MD5

      856cde622a9a5f5f5ac3c0414dedf113

    • SHA1

      3f3fb2b95d557aee8b5478dbb8d7620e95bf2ef4

    • SHA256

      223d98ec145c21ce9ff222008bd9ee02a8aaa146600972bf806708d9d689bef1

    • SHA512

      c527d53823b7c191bbcd8be9da6863fb16d615dc9d58d97a2de50ec1e59bb0c022d5bffe957cddf7eb368e60512d40e2d5eb88b52220abed128a3fe0e9b05ba7

    • SSDEEP

      393216:dMQgUTcSyvrTV6cjQP6uOX1r3clzzSefpaFTCHLafb4DjZ539a+24EWI84goJ:drgedyvHV6cjkTO+BvfSHfb4DjZ59a+a

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks