Overview

overview

10

Static

static

7

ae61100470...c1.exe

windows7-x64

10

ae61100470...c1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae61100470e76a95d9803db5ced3987da2c1bd798bcede0179415aaa1aeec9c1

  • Size

    6.3MB

  • Sample

    240522-txf6wsha65

  • MD5

    5dd40bbd766f7a25109e7b0b8d3cb583

  • SHA1

    49b6cb22225efced7b22422ddc5455057d822728

  • SHA256

    ae61100470e76a95d9803db5ced3987da2c1bd798bcede0179415aaa1aeec9c1

  • SHA512

    0d38cd1b7ae7f6ae5bdb601816aa0402ed7de34093acd7b502d69c9e071d91ee08137115bb47433a455654da281f744b47d991027a2d15c24edb87c29a10cdd2

  • SSDEEP

    196608:7bKEcNR9xyKg32ilTvVZ3gHpEqlIwE8/LVL5E:7OVVir1KpEql7t5E

Score
10/10
blackmoonbankertrojanupxvmprotect

Malware Config

Targets

    • Target

      ae61100470e76a95d9803db5ced3987da2c1bd798bcede0179415aaa1aeec9c1

    • Size

      6.3MB

    • MD5

      5dd40bbd766f7a25109e7b0b8d3cb583

    • SHA1

      49b6cb22225efced7b22422ddc5455057d822728

    • SHA256

      ae61100470e76a95d9803db5ced3987da2c1bd798bcede0179415aaa1aeec9c1

    • SHA512

      0d38cd1b7ae7f6ae5bdb601816aa0402ed7de34093acd7b502d69c9e071d91ee08137115bb47433a455654da281f744b47d991027a2d15c24edb87c29a10cdd2

    • SSDEEP

      196608:7bKEcNR9xyKg32ilTvVZ3gHpEqlIwE8/LVL5E:7OVVir1KpEql7t5E

    Score
    10/10
    blackmoonbankertrojanupxvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks