Overview

overview

10

Static

static

10

b6d483bd12...1e.exe

windows7-x64

10

b6d483bd12...1e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6d483bd126006d04b41fc22a65fe2aac865b3a8428ba6268167ebabcdcc0a1e

  • Size

    14.0MB

  • Sample

    240521-rz89cahd33

  • MD5

    230eb730fabea981ed415196ff515074

  • SHA1

    d91ffca5f97e8189d103a6509411ca4a0ac1b962

  • SHA256

    b6d483bd126006d04b41fc22a65fe2aac865b3a8428ba6268167ebabcdcc0a1e

  • SHA512

    8d962c0cf808fe865c837145ceb3fe01e277d21bdad9d1cbf56184d2aebb66c453a3562396cc7cadaf872f58d8a6186aeebffb14c85ce9f9696f35f646da44b6

  • SSDEEP

    393216:AZVz+7klbx2ZIDw3rth5jOWbjMFgXnU7sElly:AZg7oPDEPsWbjtXnas

Score
10/10
blackmoonbankerevasiontrojan

Malware Config

Targets

    • Target

      b6d483bd126006d04b41fc22a65fe2aac865b3a8428ba6268167ebabcdcc0a1e

    • Size

      14.0MB

    • MD5

      230eb730fabea981ed415196ff515074

    • SHA1

      d91ffca5f97e8189d103a6509411ca4a0ac1b962

    • SHA256

      b6d483bd126006d04b41fc22a65fe2aac865b3a8428ba6268167ebabcdcc0a1e

    • SHA512

      8d962c0cf808fe865c837145ceb3fe01e277d21bdad9d1cbf56184d2aebb66c453a3562396cc7cadaf872f58d8a6186aeebffb14c85ce9f9696f35f646da44b6

    • SSDEEP

      393216:AZVz+7klbx2ZIDw3rth5jOWbjMFgXnU7sElly:AZg7oPDEPsWbjtXnas

    Score
    10/10
    blackmoonbankerevasiontrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

1
T1012

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks