Overview

overview

10

Static

static

7

3a0dfcad73...45.exe

windows7-x64

10

3a0dfcad73...45.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a0dfcad73d46e987045ef02f2a0b811c66b6f9ae223c6d78ea5d3442fcca145

  • Size

    13.8MB

  • Sample

    240625-xwt8xaxemb

  • MD5

    1d9cea8e9d6c540927031efa5eb68b1b

  • SHA1

    d01258fa92d1243df15d1d136ed025dae446a283

  • SHA256

    3a0dfcad73d46e987045ef02f2a0b811c66b6f9ae223c6d78ea5d3442fcca145

  • SHA512

    5a250900732415b3776490304136b951b3e1fecfce87cfe531e26e75637bef31d2884fd754dee144c562bc0cc8da23771c34e574b5f2969b4974df1461a40868

  • SSDEEP

    393216:gPDPOTleBcdgmmJdSaLdc91I44291UbffF:YGVdg5JdSOdch429qx

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      3a0dfcad73d46e987045ef02f2a0b811c66b6f9ae223c6d78ea5d3442fcca145

    • Size

      13.8MB

    • MD5

      1d9cea8e9d6c540927031efa5eb68b1b

    • SHA1

      d01258fa92d1243df15d1d136ed025dae446a283

    • SHA256

      3a0dfcad73d46e987045ef02f2a0b811c66b6f9ae223c6d78ea5d3442fcca145

    • SHA512

      5a250900732415b3776490304136b951b3e1fecfce87cfe531e26e75637bef31d2884fd754dee144c562bc0cc8da23771c34e574b5f2969b4974df1461a40868

    • SSDEEP

      393216:gPDPOTleBcdgmmJdSaLdc91I44291UbffF:YGVdg5JdSOdch429qx

    Score
    10/10
    blackmoonaspackv2bankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks