Overview

overview

10

Static

static

10

18b543659a...28.exe

windows7-x64

10

18b543659a...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18b543659a23bccdc2a18803cf4d2ce7588d47b06a76dff98a9ca4c4cc646328

  • Size

    7.7MB

  • Sample

    240524-cgbg2ahd5t

  • MD5

    105cd89b0ddfd8e86235ca852c2c57dd

  • SHA1

    38e643be21749f86929f1fb624a562f5d9fd0e93

  • SHA256

    18b543659a23bccdc2a18803cf4d2ce7588d47b06a76dff98a9ca4c4cc646328

  • SHA512

    c6162d35d8173ecf91e0095c49dc6e0a7b0175e9607fa6b889cba6533ab79e607fd31757900a02997adf220d7e7058973dbcf5f9cfd58135795fb1b7bc2a0a3f

  • SSDEEP

    196608:sZDtJcDKlFBqhRK85Xs5XvyCMYpr/nGLtwNo:s9tODKlFBq7XsBvyCpLGLtw2

Score
10/10
blackmoonbankerspywarestealertrojan

Malware Config

Targets

    • Target

      18b543659a23bccdc2a18803cf4d2ce7588d47b06a76dff98a9ca4c4cc646328

    • Size

      7.7MB

    • MD5

      105cd89b0ddfd8e86235ca852c2c57dd

    • SHA1

      38e643be21749f86929f1fb624a562f5d9fd0e93

    • SHA256

      18b543659a23bccdc2a18803cf4d2ce7588d47b06a76dff98a9ca4c4cc646328

    • SHA512

      c6162d35d8173ecf91e0095c49dc6e0a7b0175e9607fa6b889cba6533ab79e607fd31757900a02997adf220d7e7058973dbcf5f9cfd58135795fb1b7bc2a0a3f

    • SSDEEP

      196608:sZDtJcDKlFBqhRK85Xs5XvyCMYpr/nGLtwNo:s9tODKlFBq7XsBvyCpLGLtw2

    Score
    10/10
    blackmoonbankerspywarestealertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks