Analysis
- max time kernel
51s - max time network
51s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
21/06/2024, 17:49
Behavioral task
behavioral1
Sample
a713964f539c1bce77b9f274efd10e4d75d3eaca0af5c02155559c8fd1d46275.exe
Resource
win7-20240508-en
4 signatures
150 seconds
General
- Target a713964f539c1bce77b9f274efd10e4d75d3eaca0af5c02155559c8fd1d46275.exe
- Size 7.4MB
- Sample240621-weabqsyepd
- SHA256 a713964f539c1bce77b9f274efd10e4d75d3eaca0af5c02155559c8fd1d46275
- MD5 cad9f58126fc20eb021d60e2a61d8c84
- SHA1 2f6ef27bacaadd8ab7f35bd05bae576c8a318ae8
- SHA512 eb843cabba73a63030c015ac6473c43bd6f53a5ff0c481fc73c88ea1667bd388c4085de5169d1b2ff88cb11f7dad051b8ee982ac5d1e42173a025dff8cd53aaa
- SSDEEP 196608:1B0zdrR9L8sl69O49eTdL7Pqt+YmP8tE5G8W7pcXr:/0zdrPL8sl6EP+mP/88V
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Blackmoon payload 1 IoCs
resource yara_rule behavioral2/files/0x0007000000023403-1.dat family_blackmoon - Loads dropped DLL 2 IoCs
pid Process 1036 a713964f539c1bce77b9f274efd10e4d75d3eaca0af5c02155559c8fd1d46275.exe 1036 a713964f539c1bce77b9f274efd10e4d75d3eaca0af5c02155559c8fd1d46275.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\SkMini\ELAPI32.DLL
- Size 260KB
- SHA256 af7fcf8c2167cddb8d05a12ca837f61ff72b251fbac80c99b816808db9ec60ca
- MD5 fb5b9ed69448eb2feabc8f9654df0bea
- SHA1 5f45b73e31f92546a8e81a579f23840496fcfe46
- SHA512 9e06f7a7ad34b37e584ad34b226546bd008fef8ba92bb9ce8b32df9285c0bebe08c9aa4bd5335003ab1fb3c52cef03f6ccbdc7dbf87d69160ed8bf27ceed6c6f
- SSDEEP 3072:2sepxb345EGjJEcFnWHO/1fu/CxZUueQXGNwwoV2TQSrt/UNqrS:2se/bIDOoWu/kSZUuIwX/SZUc
- MD5 SHA1 SHA512 SSDEEP
- Path C:\SkMini\VSCAPI32.DLL
- Size 12KB
- SHA256 5aa6d6b46ec94c37c33584809cdcf368802915ff56eb62063aaf3d943b5db681
- MD5 f37c2c022631181c77c4425e03066fcd
- SHA1 32a362bbe289ae14c2cbc8b2013af6cf11b3cc7d
- SHA512 0756d824c69fe8905c12f05e67d91e07c7dbca264a591cb2e46eface3131ca4f3bc6951c9d39bdd1c453e157d62b457d3746327a639fe6a9a906ce253a8ed736
- SSDEEP 192:YajactUW+1nKGKNW3HVMXnWXIzuZtmWJ9q4jOsmtCNMHFR:octU3JWWFAeJ9NjXmtCGF
- MD5 SHA1 SHA512 SSDEEP