Overview

overview

10

Static

static

3

cb4b93e2ac...38.exe

windows7-x64

10

cb4b93e2ac...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb4b93e2ac4c4e80248665b05bcd348a35218812766bd9502016e46263bc0f38

  • Size

    11.6MB

  • Sample

    240523-e64afsdh7t

  • MD5

    21969d0786176e7e9efb43f9fe28096e

  • SHA1

    f71e8ec275db33454bd40ed12b6f2fefb2485b9a

  • SHA256

    cb4b93e2ac4c4e80248665b05bcd348a35218812766bd9502016e46263bc0f38

  • SHA512

    a3e3a3c08c3620e8d921af4c09e9625962cd15a5b5c32350c04be6809781a18ef698a14d6204994977b5e1219e8e6640d0f50140107aa4e83dc6fba581b31999

  • SSDEEP

    196608:7Mls/Ke1jEMLnza8a2fO7bOZyvSGA+6btIMrbht+8d/IxhiA+LPycfE3Oc:7GwKe1jEMHwQOQOnh01rbzRd/IxhiA+W

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      cb4b93e2ac4c4e80248665b05bcd348a35218812766bd9502016e46263bc0f38

    • Size

      11.6MB

    • MD5

      21969d0786176e7e9efb43f9fe28096e

    • SHA1

      f71e8ec275db33454bd40ed12b6f2fefb2485b9a

    • SHA256

      cb4b93e2ac4c4e80248665b05bcd348a35218812766bd9502016e46263bc0f38

    • SHA512

      a3e3a3c08c3620e8d921af4c09e9625962cd15a5b5c32350c04be6809781a18ef698a14d6204994977b5e1219e8e6640d0f50140107aa4e83dc6fba581b31999

    • SSDEEP

      196608:7Mls/Ke1jEMLnza8a2fO7bOZyvSGA+6btIMrbht+8d/IxhiA+LPycfE3Oc:7GwKe1jEMHwQOQOnh01rbzRd/IxhiA+W

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks