Overview

overview

10

Static

static

3

11x/project7.exe

windows7-x64

1

11x/project7.exe

windows10-2004-x64

1

11x/人员表格.exe

windows7-x64

10

11x/人员表格.exe

windows10-2004-x64

10

11x/票NMH...11.exe

windows7-x64

1

11x/票NMH...11.exe

windows10-2004-x64

1

11x/表格...06.exe

windows7-x64

1

11x/表格...06.exe

windows10-2004-x64

1

²éѯÈ...15.exe

windows7-x64

10

²éѯÈ...15.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Compressed.rar
  • Size 571KB
  • Sample240606-sblc2sgf78
  • SHA256 0e087ce3f614147d54375ee8233856f7b94b7ed1ac48f83fb58bb1a2ebb34cf3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target
      11x/project7.exe
    • Size 278KB
    • SHA256 97d61372f6c31d912712c304ab53430508bd0c8eaa4ad35d090d2c753ed49822
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2
    • Target
      11x/人员表格.exe
    • Size 288KB
    • SHA256 d3afc59c269bdfe146cf1778c29f33c929f0c630a12b9268f2cdc91f7b96e552
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral3behavioral4
    • Target
      11x/票NMHZXBIM6011.exe
    • Size 143KB
    • SHA256 291dbf192884f0209229385137c69057ee7734c53a1e5c787b5ea9ed294cc6a3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5behavioral6
    • Target
      11x/表格_setup6006.exe
    • Size 143KB
    • SHA256 a64e66a8f83e6d40c2547ecece3689f256436b29aa9531f27c84329d0d595736
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7behavioral8
    • Target
      ²éѯÈë¿ÚÉè¼Æ³ÌÐò0015/查询入口设计程序0015.exe
    • Size 280KB
    • SHA256 d17748267d0b867a6a7f137d2851fd0bdce52af1179c483f41e08ca90e4c665e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral10behavioral9

MITRE ATT&CK Matrix

Tasks