Analysis
-
max time kernel
52s -
max time network
24s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
15/06/2024, 05:16
General
-
Target
F.exe
-
Size
171KB
-
MD5
5ba8d76b5819ca6c221002e36120dd83
-
SHA1
cdc2bd179ced9f8cf82183dd7a7f82b796d27c95
-
SHA256
fa0e6df3a11cbc22eec4ad28f365968b15ce6bc35c686653b5786eecb4a8a91a
-
SHA512
1edc9c1a29239c33caeaa40cc402a67e0eae0f5cda23201c91596b08a896023ac5baa49f892868807fa792e60e75728d0e7ccf7ce3fddf7a840001304fe1c5d4
-
SSDEEP
3072:8q6GWgdUpJxFz9dT+/zR4DEM3XB6zn5BO97dQ0zsgTBHijg7Iiap9y0lQYV4Fvtt:8qZby1z9Ml4gM3XBAn5B63YgJiUIi0yj
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\F.exe"C:\Users\Admin\AppData\Local\Temp\F.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
844KB
-
Filesize
844KB
-
Filesize
844KB