Overview

overview

10

Static

static

3

67721cfffa...a8.exe

windows7-x64

10

67721cfffa...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67721cfffa1bf41a890f6c00d941a50734df69b513c860f6407f6507775235a8

  • Size

    15.9MB

  • Sample

    240526-jrsydscf48

  • MD5

    2a47ac4afed51f55f3c7756cf062789a

  • SHA1

    009a7f1c04093b996307d4e007ec11849cbf2d16

  • SHA256

    67721cfffa1bf41a890f6c00d941a50734df69b513c860f6407f6507775235a8

  • SHA512

    3ad5beb65d52a7989856e700497ceac95644e1f5400e6cac6ecc983e608a9b65d9249164b03172b9728750ed7793f28a094f0a0790e4988326511e715c275ed3

  • SSDEEP

    393216:iOfk5pGNvjasmODLxhLelF3LhAvxg3zRFhF3imrXi:1fk5pGpvPxhLelF3LaK3viAXi

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      67721cfffa1bf41a890f6c00d941a50734df69b513c860f6407f6507775235a8

    • Size

      15.9MB

    • MD5

      2a47ac4afed51f55f3c7756cf062789a

    • SHA1

      009a7f1c04093b996307d4e007ec11849cbf2d16

    • SHA256

      67721cfffa1bf41a890f6c00d941a50734df69b513c860f6407f6507775235a8

    • SHA512

      3ad5beb65d52a7989856e700497ceac95644e1f5400e6cac6ecc983e608a9b65d9249164b03172b9728750ed7793f28a094f0a0790e4988326511e715c275ed3

    • SSDEEP

      393216:iOfk5pGNvjasmODLxhLelF3LhAvxg3zRFhF3imrXi:1fk5pGpvPxhLelF3LaK3viAXi

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks