Overview

overview

10

Static

static

10

2024-05-24...id.exe

windows7-x64

10

2024-05-24...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-24_47cf857b24c72a1bba3c55e7ed8e6924_icedid

  • Size

    8.6MB

  • Sample

    240524-tpd2kabe8s

  • MD5

    47cf857b24c72a1bba3c55e7ed8e6924

  • SHA1

    2a3a77793d4671d93861cd069d0919cedadc2d6e

  • SHA256

    b51b2e8c45fa3fb71adcca4de3011a6333abf798a6cb9a6e55c218b648f40495

  • SHA512

    cf329e2d3459d4add3459971c3ee35a9bfafdaafb3eff60be29f3db4dacc88f951d6fe24f26d00ed0f81e424b52b78120aea4467f0c25a2aa0550000d997cafb

  • SSDEEP

    98304:ol9oLCqqJvb+0CAds6uipFNIhgWteZGHo2bjocPew1yC/LOCQN0odU46UB:4ds6WHt2GI6jocPeXC/SiUF

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      2024-05-24_47cf857b24c72a1bba3c55e7ed8e6924_icedid

    • Size

      8.6MB

    • MD5

      47cf857b24c72a1bba3c55e7ed8e6924

    • SHA1

      2a3a77793d4671d93861cd069d0919cedadc2d6e

    • SHA256

      b51b2e8c45fa3fb71adcca4de3011a6333abf798a6cb9a6e55c218b648f40495

    • SHA512

      cf329e2d3459d4add3459971c3ee35a9bfafdaafb3eff60be29f3db4dacc88f951d6fe24f26d00ed0f81e424b52b78120aea4467f0c25a2aa0550000d997cafb

    • SSDEEP

      98304:ol9oLCqqJvb+0CAds6uipFNIhgWteZGHo2bjocPew1yC/LOCQN0odU46UB:4ds6WHt2GI6jocPeXC/SiUF

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Detects executables packed with ASPack

    • UPX dump on OEP (original entry point)

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks