Overview

overview

10

Static

static

3

90c3bf20ec...e7.exe

windows7-x64

10

90c3bf20ec...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90c3bf20ec8fb1bba1e59b3f2fff90d5f80fbffaaf611eabe31196b5445105e7

  • Size

    12.0MB

  • Sample

    240521-sthd4sad7w

  • MD5

    dfd602e0e91c26540727c7a481ecaf9c

  • SHA1

    40c2559af3a2637d4b6ddf5d3c8ecae4eb983ef7

  • SHA256

    90c3bf20ec8fb1bba1e59b3f2fff90d5f80fbffaaf611eabe31196b5445105e7

  • SHA512

    c9762bc5a7f9873374fc57b01b20dc4d26292199fa084986ef1aadefd0019f9bf600169cfa1e47f9750cd0ce4d2dda3cfee22fec3fb67254efdbdf94c3fb2a35

  • SSDEEP

    196608:10/mSNwPXEqFGgVyT2kU/k0fsvY0dHzQrWvE/AsbBmKKVRpVhaNNqvm:iOowPhGP2G0EA0dTRE/AscKCpaqvm

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      90c3bf20ec8fb1bba1e59b3f2fff90d5f80fbffaaf611eabe31196b5445105e7

    • Size

      12.0MB

    • MD5

      dfd602e0e91c26540727c7a481ecaf9c

    • SHA1

      40c2559af3a2637d4b6ddf5d3c8ecae4eb983ef7

    • SHA256

      90c3bf20ec8fb1bba1e59b3f2fff90d5f80fbffaaf611eabe31196b5445105e7

    • SHA512

      c9762bc5a7f9873374fc57b01b20dc4d26292199fa084986ef1aadefd0019f9bf600169cfa1e47f9750cd0ce4d2dda3cfee22fec3fb67254efdbdf94c3fb2a35

    • SSDEEP

      196608:10/mSNwPXEqFGgVyT2kU/k0fsvY0dHzQrWvE/AsbBmKKVRpVhaNNqvm:iOowPhGP2G0EA0dTRE/AscKCpaqvm

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks