Overview

overview

10

Static

static

3

3198e48126...68.exe

windows7-x64

10

3198e48126...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3198e481262bb4723ca43dd6740240b40429b44bdb775195f94342aff17dc768

  • Size

    13.0MB

  • Sample

    240704-eyzmasthnj

  • MD5

    49a208ed1a98ec041de65f882163f62b

  • SHA1

    9f9790c7d3856820bccc916a0cf9285ef3abf6b0

  • SHA256

    3198e481262bb4723ca43dd6740240b40429b44bdb775195f94342aff17dc768

  • SHA512

    8516d04f526c9064ee3e425d8b8be44f1d535716c0315ba225fcbdb7c5225f58e0bbd7aa65deebb258bf0cfdb822f570ae0c4458f5397a1e8b4e96ec1364d9d3

  • SSDEEP

    393216:iOzlFbN6yWADGyULN7HCP4kvfTSUa1/Lt:1z7UyWAa7L9shT1a1zt

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      3198e481262bb4723ca43dd6740240b40429b44bdb775195f94342aff17dc768

    • Size

      13.0MB

    • MD5

      49a208ed1a98ec041de65f882163f62b

    • SHA1

      9f9790c7d3856820bccc916a0cf9285ef3abf6b0

    • SHA256

      3198e481262bb4723ca43dd6740240b40429b44bdb775195f94342aff17dc768

    • SHA512

      8516d04f526c9064ee3e425d8b8be44f1d535716c0315ba225fcbdb7c5225f58e0bbd7aa65deebb258bf0cfdb822f570ae0c4458f5397a1e8b4e96ec1364d9d3

    • SSDEEP

      393216:iOzlFbN6yWADGyULN7HCP4kvfTSUa1/Lt:1z7UyWAa7L9shT1a1zt

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks