Overview

overview

10

Static

static

3

fac6e21ff5...f4.exe

windows7-x64

fac6e21ff5...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fac6e21ff51aed5adeeb92a7b10966a81dd62861edfc2cc2b25f48a003187df4

  • Size

    2.3MB

  • Sample

    240604-2ggfqadf7v

  • MD5

    d9c1ca97433bbfad45d6109aaf6db50d

  • SHA1

    8f702f11009a9a5f27a5e697e51decb032a0e233

  • SHA256

    fac6e21ff51aed5adeeb92a7b10966a81dd62861edfc2cc2b25f48a003187df4

  • SHA512

    20b844ea3e234ed10c4d12699a9cc79c96ba01de2f16823ddeb225d6155f8c948609418b3b0e92985e9adde9063dd6e1317783139fa9b1f4346352636d7a85b3

  • SSDEEP

    49152:OAR6pHImCXi45lSevpEie7zoDp349aXZmMAQ0f3/xtg813zvH48:OwI7Wl5Yei1o1349unnoxm8NzA

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      fac6e21ff51aed5adeeb92a7b10966a81dd62861edfc2cc2b25f48a003187df4

    • Size

      2.3MB

    • MD5

      d9c1ca97433bbfad45d6109aaf6db50d

    • SHA1

      8f702f11009a9a5f27a5e697e51decb032a0e233

    • SHA256

      fac6e21ff51aed5adeeb92a7b10966a81dd62861edfc2cc2b25f48a003187df4

    • SHA512

      20b844ea3e234ed10c4d12699a9cc79c96ba01de2f16823ddeb225d6155f8c948609418b3b0e92985e9adde9063dd6e1317783139fa9b1f4346352636d7a85b3

    • SSDEEP

      49152:OAR6pHImCXi45lSevpEie7zoDp349aXZmMAQ0f3/xtg813zvH48:OwI7Wl5Yei1o1349unnoxm8NzA

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks