Overview

overview

10

Static

static

7

49ff964ef5...83.exe

windows7-x64

10

49ff964ef5...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49ff964ef5b82c2010b84856a20d479ff8f0ad40d8d840ee8418b30617f63383

  • Size

    12.2MB

  • Sample

    240524-h3dr6she8y

  • MD5

    56329633b5fd7357375c5e0b0336bbac

  • SHA1

    d0b4e7ad431fcbaf89cafe93fba7665f1cf680fa

  • SHA256

    49ff964ef5b82c2010b84856a20d479ff8f0ad40d8d840ee8418b30617f63383

  • SHA512

    323056798c89a8017cef0d683be3d437b666a876572f6161080b8cc979b85923292b8061fcaf193bee82b72b002470efda7ef0e8128491bf21c7f11fb85a767c

  • SSDEEP

    393216:gPDPKz1odC523LhAvxnIpwt+nnZn1wWN2ajmD:Yiz1R523La5IprnneD

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      49ff964ef5b82c2010b84856a20d479ff8f0ad40d8d840ee8418b30617f63383

    • Size

      12.2MB

    • MD5

      56329633b5fd7357375c5e0b0336bbac

    • SHA1

      d0b4e7ad431fcbaf89cafe93fba7665f1cf680fa

    • SHA256

      49ff964ef5b82c2010b84856a20d479ff8f0ad40d8d840ee8418b30617f63383

    • SHA512

      323056798c89a8017cef0d683be3d437b666a876572f6161080b8cc979b85923292b8061fcaf193bee82b72b002470efda7ef0e8128491bf21c7f11fb85a767c

    • SSDEEP

      393216:gPDPKz1odC523LhAvxnIpwt+nnZn1wWN2ajmD:Yiz1R523La5IprnneD

    Score
    10/10
    blackmoonaspackv2bankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks