Overview

overview

10

Static

static

10

0162b96464...84.exe

windows7-x64

10

0162b96464...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0162b9646481939bfadca3f7c88175a1fa3a22cf13d34b04905ff350c4310684.exe

  • Size

    13.4MB

  • Sample

    241123-jrc7ya1nfz

  • MD5

    cf941555a37a8e746db60544ca4b61a1

  • SHA1

    cf097b6731d0544772bd5a4595b54c11b631d3ea

  • SHA256

    0162b9646481939bfadca3f7c88175a1fa3a22cf13d34b04905ff350c4310684

  • SHA512

    4ededa1eeb05a96f0c8621049426a419cc3815d0ab22aa1994c257bb922ac44cf16c9ac743af6e0ba2fd0f647e701aa0e7b0605840a346dd280ed29deef8a851

  • SSDEEP

    393216:8u1LuYwYuYgu1LuYwYuYIu1LuYwYuYgu1LuYwYuYb:/

Score
10/10
blackmoonbankerdiscoverytrojan

Malware Config

Targets

    • Target

      0162b9646481939bfadca3f7c88175a1fa3a22cf13d34b04905ff350c4310684.exe

    • Size

      13.4MB

    • MD5

      cf941555a37a8e746db60544ca4b61a1

    • SHA1

      cf097b6731d0544772bd5a4595b54c11b631d3ea

    • SHA256

      0162b9646481939bfadca3f7c88175a1fa3a22cf13d34b04905ff350c4310684

    • SHA512

      4ededa1eeb05a96f0c8621049426a419cc3815d0ab22aa1994c257bb922ac44cf16c9ac743af6e0ba2fd0f647e701aa0e7b0605840a346dd280ed29deef8a851

    • SSDEEP

      393216:8u1LuYwYuYgu1LuYwYuYIu1LuYwYuYgu1LuYwYuYb:/

    Score
    10/10
    blackmoonbankerdiscoverytrojan

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks