Overview

overview

10

Static

static

10

786a239ae3...22.exe

windows7-x64

10

786a239ae3...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bec7c9faf5bb63cdc51302fe0ea5e002.bin

  • Size

    109KB

  • Sample

    240411-b4degagh86

  • MD5

    8396b963dc6f9783a605eb1af9e12040

  • SHA1

    35ade7d620c23acbb0b8fb51bb16f5ebd286920c

  • SHA256

    8e2720869002c1d965a8d1bd4dc9668135267a58acc4c01e8fbc94b72f43ce07

  • SHA512

    511d0cd47212418dc5a69adbfe925a77b1f44cf07e2a528e749c410c52e5e7d1670d9fb735c71eea7e07904db1a5dc87abf6ca6a4e29c879ee1fe15bb90a5475

  • SSDEEP

    3072:I5wdmGmCXm4Cqm/5A/bYh2mNTFEMjULG6uUbThY:I5wvAqm/SzYsmDEMULdJfhY

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      786a239ae39c35117b5388ec4d7705898c5d1f3192c237f68be8db6f332b1a22.exe

    • Size

      396KB

    • MD5

      bec7c9faf5bb63cdc51302fe0ea5e002

    • SHA1

      715d1d2cf44a04d8522bf6eef3721df1c26eafe3

    • SHA256

      786a239ae39c35117b5388ec4d7705898c5d1f3192c237f68be8db6f332b1a22

    • SHA512

      18739b242b3a74406958f00225d5e28ea6021acc6e7c4e226aecd8956f13fc826223e7ce526ca7f96582a143ef880b228637bf4b24757c7b15c98e4603d1c10f

    • SSDEEP

      6144:7vbuWQu/cuaS2l8iE0B55FrJJJekPdb5J22l:7vqWQub2lrE0B55FpekPdb/22l

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks