Overview

overview

10

Static

static

10

cf0d77061f...c6.exe

windows7-x64

10

cf0d77061f...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf0d77061ff2c2455c38a960272346bae3f01b9553a673b3bde1a8529773dcc6

  • Size

    338KB

  • Sample

    240422-dz9cfsfb91

  • MD5

    8ff28dbc196e05cbfc53400a600f0651

  • SHA1

    c76bc39f4044b131171ac0c2e5d42c77b90b215f

  • SHA256

    cf0d77061ff2c2455c38a960272346bae3f01b9553a673b3bde1a8529773dcc6

  • SHA512

    c782f0b010eafa830cbe2aaaa2a6edf36ee9338661c9c36e9a02ed3908f66b0085a4f0ef58782081fd8f094cd5efb452e26eee1ec061bb3ce1badcc73006e32f

  • SSDEEP

    6144:b5/YZ58drqrhGcbLhmvjSN6jZhixVK/B/zkXudeh:b5/Q58drihGiLhmGNiZsx0B/zkXoeh

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      cf0d77061ff2c2455c38a960272346bae3f01b9553a673b3bde1a8529773dcc6

    • Size

      338KB

    • MD5

      8ff28dbc196e05cbfc53400a600f0651

    • SHA1

      c76bc39f4044b131171ac0c2e5d42c77b90b215f

    • SHA256

      cf0d77061ff2c2455c38a960272346bae3f01b9553a673b3bde1a8529773dcc6

    • SHA512

      c782f0b010eafa830cbe2aaaa2a6edf36ee9338661c9c36e9a02ed3908f66b0085a4f0ef58782081fd8f094cd5efb452e26eee1ec061bb3ce1badcc73006e32f

    • SSDEEP

      6144:b5/YZ58drqrhGcbLhmvjSN6jZhixVK/B/zkXudeh:b5/Q58drihGiLhmGNiZsx0B/zkXoeh

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks