Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
11/08/2024, 18:51
General
-
Target
0d8af20c620bacd67eb03109809d17f9615321bfd63310bc41432fc32078b781.exe
-
Size
4.8MB
-
MD5
8d9c86dcadafac9aaa70c38f0f9a7369
-
SHA1
3401931efb74bfd23f3bf997593e3f295253c220
-
SHA256
0d8af20c620bacd67eb03109809d17f9615321bfd63310bc41432fc32078b781
-
SHA512
ad5992fe05711263ada0ae1033d105068bcf18a5c87ba53dd859b1cf8fb3e7a5da0e6678e711917e97b4b365fb4db830ed1c15e01ed706afb00155864610af1a
-
SSDEEP
98304:5D0V5pOsbiS/4QpKWyUZ40yDa4GNjZ3GoiV3skJigyUq+E:10/mSQQpKWUGNEoiN/A4E
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d8af20c620bacd67eb03109809d17f9615321bfd63310bc41432fc32078b781.exe"C:\Users\Admin\AppData\Local\Temp\0d8af20c620bacd67eb03109809d17f9615321bfd63310bc41432fc32078b781.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
-
Filesize
6.0MB
-
Filesize
4KB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
12KB