Overview

overview

10

Static

static

10

d6b571bd3e...3f.exe

windows7-x64

10

d6b571bd3e...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6b571bd3e9b40df1750ab716329eb14b18f07785de8afe5ad89092206eacd3f

  • Size

    190KB

  • Sample

    240521-e966hshd84

  • MD5

    071a998972f802cc838aa2ef9c6b8870

  • SHA1

    55c25028dbdf877176b56208be72aeec79dede4d

  • SHA256

    d6b571bd3e9b40df1750ab716329eb14b18f07785de8afe5ad89092206eacd3f

  • SHA512

    8b72859259eb1d0074ef5989c8553cb2e4853d8415e81dc46f5c82c895fe973d02cba176a2af34a94a39f47ca92f2f7a87faca2f868d7911545e77eb40830bec

  • SSDEEP

    3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+9:Ycm4FmowdHoSLEaTBftapTsyFeO9

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      d6b571bd3e9b40df1750ab716329eb14b18f07785de8afe5ad89092206eacd3f

    • Size

      190KB

    • MD5

      071a998972f802cc838aa2ef9c6b8870

    • SHA1

      55c25028dbdf877176b56208be72aeec79dede4d

    • SHA256

      d6b571bd3e9b40df1750ab716329eb14b18f07785de8afe5ad89092206eacd3f

    • SHA512

      8b72859259eb1d0074ef5989c8553cb2e4853d8415e81dc46f5c82c895fe973d02cba176a2af34a94a39f47ca92f2f7a87faca2f868d7911545e77eb40830bec

    • SSDEEP

      3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+9:Ycm4FmowdHoSLEaTBftapTsyFeO9

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks