Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e4cca45eb344629ddf3dd573b5700cb7d825d922ae1f2fca12eb2f91d0564c7

  • Size

    1.5MB

  • Sample

    240720-e9yt5swgmp

  • MD5

    f0b78bc71e00344aaa276db0f94a1c9a

  • SHA1

    8a44e433d05db914204d2094d3b97678a9dbd613

  • SHA256

    1e4cca45eb344629ddf3dd573b5700cb7d825d922ae1f2fca12eb2f91d0564c7

  • SHA512

    79d3ffb60409d0e17ec7d56d635c46cf3043eeebabee70e09e879585f81584101e9ce2fbb30cbeed38f9dd3ba34fea78edacd10195fb30d4f2da692bb4be1f79

  • SSDEEP

    49152:IjqfWpxkRPI+btw3X6TPm05hmYfxmauS8PLdob5gxoSeK:IjqWi++btw3KTe05Hfxm1PLdob5gyS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1e4cca45eb344629ddf3dd573b5700cb7d825d922ae1f2fca12eb2f91d0564c7

    • Size

      1.5MB

    • MD5

      f0b78bc71e00344aaa276db0f94a1c9a

    • SHA1

      8a44e433d05db914204d2094d3b97678a9dbd613

    • SHA256

      1e4cca45eb344629ddf3dd573b5700cb7d825d922ae1f2fca12eb2f91d0564c7

    • SHA512

      79d3ffb60409d0e17ec7d56d635c46cf3043eeebabee70e09e879585f81584101e9ce2fbb30cbeed38f9dd3ba34fea78edacd10195fb30d4f2da692bb4be1f79

    • SSDEEP

      49152:IjqfWpxkRPI+btw3X6TPm05hmYfxmauS8PLdob5gxoSeK:IjqWi++btw3KTe05Hfxm1PLdob5gyS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks