Overview

overview

10

Static

static

10

2a94bef55d...67.exe

windows7-x64

10

2a94bef55d...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a94bef55dd9fa7692bb27739a510e434c8a87d4c0661c8a70854bacdcf4ea67.exe

  • Size

    113KB

  • Sample

    240410-bq65mabe24

  • MD5

    7f1724a7f154d9be81887ef065dce1b1

  • SHA1

    0a060d513d209075c4d914b94ef1bbe6285b995d

  • SHA256

    2a94bef55dd9fa7692bb27739a510e434c8a87d4c0661c8a70854bacdcf4ea67

  • SHA512

    ff170925ff666c5558d4619c4ee133ec4a5ac5b2b23c188f280fea9b8d32bf7e81f584a5a445226e7ccdc62f7cd0fbb406a711173b0b48d7ef5a35de15350a46

  • SSDEEP

    1536:bViMsvI+AQX1OdBaKpVllHG/fdt+fV3JbB5OPnDE5+QDJ4rX27qTrf:bav9OdPx8wJ4rm7qn

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      2a94bef55dd9fa7692bb27739a510e434c8a87d4c0661c8a70854bacdcf4ea67.exe

    • Size

      113KB

    • MD5

      7f1724a7f154d9be81887ef065dce1b1

    • SHA1

      0a060d513d209075c4d914b94ef1bbe6285b995d

    • SHA256

      2a94bef55dd9fa7692bb27739a510e434c8a87d4c0661c8a70854bacdcf4ea67

    • SHA512

      ff170925ff666c5558d4619c4ee133ec4a5ac5b2b23c188f280fea9b8d32bf7e81f584a5a445226e7ccdc62f7cd0fbb406a711173b0b48d7ef5a35de15350a46

    • SSDEEP

      1536:bViMsvI+AQX1OdBaKpVllHG/fdt+fV3JbB5OPnDE5+QDJ4rX27qTrf:bav9OdPx8wJ4rm7qn

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks