Overview

overview

10

Static

static

10

e9a7fdb034...9e.exe

windows7-x64

10

e9a7fdb034...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9a7fdb0344525ae154d0433142a3ecacb583cf270fc73c9d87eb5a9101c939e

  • Size

    11.6MB

  • Sample

    240524-gbxkjafc69

  • MD5

    de3e8d47c82f874ba2de0fd1c147b0c5

  • SHA1

    06017c951ba9fd44fc8fabfeb37e904d90910039

  • SHA256

    e9a7fdb0344525ae154d0433142a3ecacb583cf270fc73c9d87eb5a9101c939e

  • SHA512

    e72cd04424ab003eeeaaebcfd4838a50130e86e56d2fd673d765129b1c9a083079b97108e414b8da7dc24f15e7372b95637f47815565699ed0ffa0b5cb1d0447

  • SSDEEP

    196608:rCgMmILN6O8C/RAIf6ZCPBTrxEHGcohkTOFxjYlZaJVG1um:rRK4OJAIo49EBoSQ0ai1um

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      e9a7fdb0344525ae154d0433142a3ecacb583cf270fc73c9d87eb5a9101c939e

    • Size

      11.6MB

    • MD5

      de3e8d47c82f874ba2de0fd1c147b0c5

    • SHA1

      06017c951ba9fd44fc8fabfeb37e904d90910039

    • SHA256

      e9a7fdb0344525ae154d0433142a3ecacb583cf270fc73c9d87eb5a9101c939e

    • SHA512

      e72cd04424ab003eeeaaebcfd4838a50130e86e56d2fd673d765129b1c9a083079b97108e414b8da7dc24f15e7372b95637f47815565699ed0ffa0b5cb1d0447

    • SSDEEP

      196608:rCgMmILN6O8C/RAIf6ZCPBTrxEHGcohkTOFxjYlZaJVG1um:rRK4OJAIo49EBoSQ0ai1um

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks