Overview

overview

10

Static

static

3

C1.exe

windows7-x64

10

C1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    C1.exe

  • Size

    2.1MB

  • Sample

    241121-lmdc9a1kgs

  • MD5

    dc161eeca7c04c7c1f6946120c32b276

  • SHA1

    1b3fc97e0196a3293758f77edf372c781e1e2149

  • SHA256

    afc91e7a837ed26029ee80c056ea98e686aab036eff83786c5b6ea0bb80b5967

  • SHA512

    d7d613a26160e214940cc9ce6d104af49b590ce8f461f29a26d8767c8d8bb7266793a8c3882c4f6cf3f38b59d492a7fa1d41d4e6d83e125ede4abacae4310e7e

  • SSDEEP

    49152:rkDFbj+VTmnOjsf6vZy/Xmmsn2LzOoNNnQh8yDaH:rSKVTmnOjsaZy/WmsnGxz+taH

Score
10/10
blackmoonbankerdiscoverytrojan

Malware Config

Targets

    • Target

      C1.exe

    • Size

      2.1MB

    • MD5

      dc161eeca7c04c7c1f6946120c32b276

    • SHA1

      1b3fc97e0196a3293758f77edf372c781e1e2149

    • SHA256

      afc91e7a837ed26029ee80c056ea98e686aab036eff83786c5b6ea0bb80b5967

    • SHA512

      d7d613a26160e214940cc9ce6d104af49b590ce8f461f29a26d8767c8d8bb7266793a8c3882c4f6cf3f38b59d492a7fa1d41d4e6d83e125ede4abacae4310e7e

    • SSDEEP

      49152:rkDFbj+VTmnOjsf6vZy/Xmmsn2LzOoNNnQh8yDaH:rSKVTmnOjsaZy/WmsnGxz+taH

    Score
    10/10
    blackmoonbankerdiscoverytrojan

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks