Overview

overview

10

Static

static

3

11f718681f...db.exe

windows7-x64

10

11f718681f...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11f718681ff1723d89cd4a7de13c6447f3417f470f695c62006372651e4f4ddb

  • Size

    9.2MB

  • Sample

    240522-lcv6baae44

  • MD5

    4d70ea2a3e646d80637741e3d516a0ee

  • SHA1

    683a63aa38ec45ccfe98c867ec7fa3dd9f534746

  • SHA256

    11f718681ff1723d89cd4a7de13c6447f3417f470f695c62006372651e4f4ddb

  • SHA512

    3e12086fd5bec5ee19f880c608146404b426d72bf2f0c6d2225bd0ff907dcadf2d1d3377ad29d0e48450e519ee8bbaea860c28046ad04cb25719fcde1cc08fa0

  • SSDEEP

    196608:Vi0/YuNJ0C4ONeaY0UdLT2xLDTHJc8pYV9UWMTjs5kzwnz0hfb:Vt/rWCdlrUdGxDI4qIj

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      11f718681ff1723d89cd4a7de13c6447f3417f470f695c62006372651e4f4ddb

    • Size

      9.2MB

    • MD5

      4d70ea2a3e646d80637741e3d516a0ee

    • SHA1

      683a63aa38ec45ccfe98c867ec7fa3dd9f534746

    • SHA256

      11f718681ff1723d89cd4a7de13c6447f3417f470f695c62006372651e4f4ddb

    • SHA512

      3e12086fd5bec5ee19f880c608146404b426d72bf2f0c6d2225bd0ff907dcadf2d1d3377ad29d0e48450e519ee8bbaea860c28046ad04cb25719fcde1cc08fa0

    • SSDEEP

      196608:Vi0/YuNJ0C4ONeaY0UdLT2xLDTHJc8pYV9UWMTjs5kzwnz0hfb:Vt/rWCdlrUdGxDI4qIj

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks