General
- Target 刺客远程控制破解版修复免杀过传输报毒.zip
- Size 28.2MB
- Sample240512-sdwlssef22
- SHA256 c15b7d2402be8884b7f0e7cbc263e3b3c034601e559b530c55aeb5640ece8822
Score
10/10
Malware Config
Targets
-
- Target 刺客远程控制破解版修复免杀过传输报毒.zip
- Size 28.2MB
- SHA256 c15b7d2402be8884b7f0e7cbc263e3b3c034601e559b530c55aeb5640ece8822
Score10/10-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.