Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 09:34
General
-
Target
CB1.exe
-
Size
1.7MB
-
MD5
2e8f9db862550d35cc89fec86bb4ae85
-
SHA1
f6cc36297987662c2a432fb658af92a9d5974029
-
SHA256
28c815d0b6262ea2a20fbeea9a04b89db035131981ea8925cd12e3ed414a6d62
-
SHA512
9f12aabdbb2af79575d8099647be7e4dd0d1ba5c342d40dc2c9a2fc34492e9ef7ce7c61c01082511486a66d1e128128a7df689653509224e1702eba390b95c62
-
SSDEEP
24576:ivnIiCUIw+1Tg6zPk84mFGFWsuC1YmSD4SlDCG4QnZ4v/KEVosEi/K973y4WIV:iAQP+hgWPkcfsbC4aeteZMyxXM4
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CB1.exe"C:\Users\Admin\AppData\Local\Temp\CB1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB