blackmoon | ac9a226e20a283e25334aca4f8d47ab5793c20d6782c703c69bdfc9f7cfd7225 | Triage

Submit
Reports

Overview

overview

Static

static

3

8ff979ff06...18.dll

windows7-x64

8ff979ff06...18.dll

windows10-2004-x64

7

Sharing

General

Target

8ff979ff0623de1b5f72afebee3ce3d8_JaffaCakes118
Size

644KB
Sample

241123-w277aawndr
MD5

8ff979ff0623de1b5f72afebee3ce3d8
SHA1

60af7c6e27cdfab4a0f96b13c14f950e878db625
SHA256

ac9a226e20a283e25334aca4f8d47ab5793c20d6782c703c69bdfc9f7cfd7225
SHA512

4957cd830184e23402a6187e80ecca6a25fbd2a5d96ceca4f63072c22fa5e23802865ec924071df090bef35a5c1438c5583bbe551be2967b12ba8527893cf5cd
SSDEEP

6144:++fwIX44TscJRLtf6umk+3HHsM1nNzZ8mMK1SnXpzeT8swus:+owIo4bRLtaZ1nNzZ8blnXpZswu

Score

10^/10

blackmoon banker discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8ff979ff0623de1b5f72afebee3ce3d8_JaffaCakes118.dll

Resource

win7-20240903-en

blackmoon banker discovery trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

8ff979ff0623de1b5f72afebee3ce3d8_JaffaCakes118.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  8ff979ff0623de1b5f72afebee3ce3d8_JaffaCakes118
- Size
  
  644KB
- MD5
  
  8ff979ff0623de1b5f72afebee3ce3d8
- SHA1
  
  60af7c6e27cdfab4a0f96b13c14f950e878db625
- SHA256
  
  ac9a226e20a283e25334aca4f8d47ab5793c20d6782c703c69bdfc9f7cfd7225
- SHA512
  
  4957cd830184e23402a6187e80ecca6a25fbd2a5d96ceca4f63072c22fa5e23802865ec924071df090bef35a5c1438c5583bbe551be2967b12ba8527893cf5cd
- SSDEEP
  
  6144:++fwIX44TscJRLtf6umk+3HHsM1nNzZ8mMK1SnXpzeT8swus:+owIo4bRLtaZ1nNzZ8blnXpZswu
Score

10^/10

blackmoon banker discovery trojan
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojan

behavioral2

© 2018-2024

Terms | Privacy