Overview

overview

10

Static

static

3

W1.exe

windows7-x64

10

W1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    W1.exe

  • Size

    6.1MB

  • Sample

    241125-h7139s1pdl

  • MD5

    786d156a0761de977a5c251d0c67307b

  • SHA1

    44dd1b8510a8080e81d22667e6b53bf7951254a5

  • SHA256

    12e6299a5bd5d70f0c780b93e6da8123b88c892791966e40efdf1053eca4ef07

  • SHA512

    0e7ec012be2a41e2ca7ab6b94a4989377651bd962c07878d9bd81fa780b59327ade883a82f75c9ccb1ccd7b2a185e8a744dfc76083c4d74f70dc779feca4ddd9

  • SSDEEP

    98304:FvciTQ4LGWJ3htC+7K9vKE4sjIuJ1pE/ZOJu/Z++AE54sypMjM+klJESlc12J:6r1A3htCP9yhGS/RIo4tMIr2As

Score
10/10
blackmoonbankerdiscoverytrojan

Malware Config

Targets

    • Target

      W1.exe

    • Size

      6.1MB

    • MD5

      786d156a0761de977a5c251d0c67307b

    • SHA1

      44dd1b8510a8080e81d22667e6b53bf7951254a5

    • SHA256

      12e6299a5bd5d70f0c780b93e6da8123b88c892791966e40efdf1053eca4ef07

    • SHA512

      0e7ec012be2a41e2ca7ab6b94a4989377651bd962c07878d9bd81fa780b59327ade883a82f75c9ccb1ccd7b2a185e8a744dfc76083c4d74f70dc779feca4ddd9

    • SSDEEP

      98304:FvciTQ4LGWJ3htC+7K9vKE4sjIuJ1pE/ZOJu/Z++AE54sypMjM+klJESlc12J:6r1A3htCP9yhGS/RIo4tMIr2As

    Score
    10/10
    blackmoonbankerdiscoverytrojan

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks