Overview

overview

10

Static

static

10

8b92d6d66b...83.exe

windows7-x64

10

8b92d6d66b...83.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b92d6d66bf6c65c63628851089f12383b070fa145e4b20efcca592eaec02483

  • Size

    190KB

  • Sample

    240504-ak793agh7t

  • MD5

    a1650555c8951564b4272801fc94039d

  • SHA1

    2cd5a67b4d6c39de8923a55f312aa76783d71af6

  • SHA256

    8b92d6d66bf6c65c63628851089f12383b070fa145e4b20efcca592eaec02483

  • SHA512

    091403a5bf1af07859c8d7fa884c4ea8a17026f66bf8a4700d9cab91b2c78866f6acd8fba0f3811d9dd3fc3dde4bc7395f5dc8dda429b6579185d9a5b1e4a009

  • SSDEEP

    3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+Of:Ycm4FmowdHoSLEaTBftapTsyFeOA

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      8b92d6d66bf6c65c63628851089f12383b070fa145e4b20efcca592eaec02483

    • Size

      190KB

    • MD5

      a1650555c8951564b4272801fc94039d

    • SHA1

      2cd5a67b4d6c39de8923a55f312aa76783d71af6

    • SHA256

      8b92d6d66bf6c65c63628851089f12383b070fa145e4b20efcca592eaec02483

    • SHA512

      091403a5bf1af07859c8d7fa884c4ea8a17026f66bf8a4700d9cab91b2c78866f6acd8fba0f3811d9dd3fc3dde4bc7395f5dc8dda429b6579185d9a5b1e4a009

    • SSDEEP

      3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+Of:Ycm4FmowdHoSLEaTBftapTsyFeOA

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks