Overview

overview

10

Static

static

7

f162b23489...72.exe

windows7-x64

10

f162b23489...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f162b23489ec2c3308a43fdb4fad6dae704dd2c1501a5317af47cb6468d53072

  • Size

    8.4MB

  • Sample

    240528-1bgnvsda3v

  • MD5

    ce57e82f9f976879c842295bc43751df

  • SHA1

    e9a88c801d6c3cf8acd4ebbae717f1eb7af0c8c7

  • SHA256

    f162b23489ec2c3308a43fdb4fad6dae704dd2c1501a5317af47cb6468d53072

  • SHA512

    d19aa37eadb90c4bd4bf505ab6f2bade57f805f047589f51b102ba0fdc74438639b7fd3507d7d04406870d8bc42f2be7c4c7cc6e9e6e8e97c0c714a029a89b10

  • SSDEEP

    196608:PYPDPy3KWUGNEoiN/A4sNKOXB1xi6//rcf4Ez+vrvT5:gPDPDpGNvAOxiCO4EST5

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      f162b23489ec2c3308a43fdb4fad6dae704dd2c1501a5317af47cb6468d53072

    • Size

      8.4MB

    • MD5

      ce57e82f9f976879c842295bc43751df

    • SHA1

      e9a88c801d6c3cf8acd4ebbae717f1eb7af0c8c7

    • SHA256

      f162b23489ec2c3308a43fdb4fad6dae704dd2c1501a5317af47cb6468d53072

    • SHA512

      d19aa37eadb90c4bd4bf505ab6f2bade57f805f047589f51b102ba0fdc74438639b7fd3507d7d04406870d8bc42f2be7c4c7cc6e9e6e8e97c0c714a029a89b10

    • SSDEEP

      196608:PYPDPy3KWUGNEoiN/A4sNKOXB1xi6//rcf4Ez+vrvT5:gPDPDpGNvAOxiCO4EST5

    Score
    10/10
    blackmoonaspackv2bankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks