Overview

overview

10

Static

static

3

709a9db7cd...e2.exe

windows7-x64

10

709a9db7cd...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    709a9db7cd93596ea8af2ff334b291452d90c19f1a87445a98bdbc24af4f3be2

  • Size

    15.9MB

  • Sample

    240523-24hbjach27

  • MD5

    05dd335d65e9f5266d30395e8a81db13

  • SHA1

    9e2279f1e25e41a4f3358b0411d57c3e216c40f1

  • SHA256

    709a9db7cd93596ea8af2ff334b291452d90c19f1a87445a98bdbc24af4f3be2

  • SHA512

    7e6a190612acf34ae0877532bb63459d74f76be49c97cbbbd158f9a3371782d7bd6e877c10c6d509d43873af5709fdbd182feb65491fea7fb2ef4defbe652210

  • SSDEEP

    393216:iOEk/5pGNvzdQknAmvMW7j3LhAvx33YddvrvqNgh4g0Oxn/u+Jh:1Ek/5pGpqIAmvMW7j3Lax3Y/Tqed0Otd

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      709a9db7cd93596ea8af2ff334b291452d90c19f1a87445a98bdbc24af4f3be2

    • Size

      15.9MB

    • MD5

      05dd335d65e9f5266d30395e8a81db13

    • SHA1

      9e2279f1e25e41a4f3358b0411d57c3e216c40f1

    • SHA256

      709a9db7cd93596ea8af2ff334b291452d90c19f1a87445a98bdbc24af4f3be2

    • SHA512

      7e6a190612acf34ae0877532bb63459d74f76be49c97cbbbd158f9a3371782d7bd6e877c10c6d509d43873af5709fdbd182feb65491fea7fb2ef4defbe652210

    • SSDEEP

      393216:iOEk/5pGNvzdQknAmvMW7j3LhAvx33YddvrvqNgh4g0Oxn/u+Jh:1Ek/5pGpqIAmvMW7j3Lax3Y/Tqed0Otd

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks