Overview

overview

10

Static

static

10

tfd.zip

windows10-ltsc 2021-x64

10

tfd.zip

windows11-21h2-x64

1

Resubmissions

22/12/2024, 05:16

241222-fygbdsvnft10

22/12/2024, 05:15

241222-fx1zeavney

22/12/2024, 05:11

241222-fvgsravpen10

22/12/2024, 05:11

241222-fvapfavmfw10

22/12/2024, 05:10

241222-ft1t8svmet10

22/12/2024, 05:10

241222-ftqn9svpcm

22/12/2024, 05:08

241222-fsntaavnhr10

22/12/2024, 05:05

241222-fq43gsvndj10

22/12/2024, 04:38

241222-e9fzbstnbs10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tfd.zip
  • Size 6.6MB
  • Sample241222-e9fzbstnbs
  • SHA256 fcf54eaf0f05dae2521ce9a53b67a0ac8a72c98f9f8b25a9258fbe1261f0be5e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blackmoonbankerdiscoverytrojan

Malware Config

Targets

    • Target
      tfd.zip
    • Size 6.6MB
    • SHA256 fcf54eaf0f05dae2521ce9a53b67a0ac8a72c98f9f8b25a9258fbe1261f0be5e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    blackmoonbankerdiscoverytrojan

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks