Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
29/04/2024, 06:54
General
-
Target
Steam&ѡV1.2.exe
-
Size
541KB
-
MD5
6d1a6d222769aeef4dad19282f9567a2
-
SHA1
38621c1339fc473a68b5dac7983afb8ece9e3acc
-
SHA256
050ad0301dc9a4983da715109c89efbb026b2cee000d8365ddf74cc03540b0ba
-
SHA512
7a0523d5635d115339d15a6591d70ccb44400dcddf03711233b1a7b66dc2491f1a3c224e4eaaa7250ffe8073d82ff1a26e3278163a58cc6098c79696c02ecf8a
-
SSDEEP
6144:GHJcAE1Gs/DnqbMxT3lEMLkbeh+WVVn7r5pvsgFZl+GIIIIIIIhIIIIIIIIIIIIH:GatTnqbqldLkbewch5Gi0
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 4 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Steam&ѡV1.2.exe"C:\Users\Admin\AppData\Local\Temp\Steam&ѡV1.2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
216KB
-
Filesize
76KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
1.3MB
-
Filesize
76KB