Analysis
-
max time kernel
96s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 14:17
General
-
Target
f8312b3f6f9ccd866e637231d87a12034d984bd1ecc42899d31b962e085f028f.exe
-
Size
263KB
-
MD5
ae31cb34151502c176f82a32bc4c0d6a
-
SHA1
4453447aa9b32c2f27ecb8de80e969c7e38e1b1f
-
SHA256
f8312b3f6f9ccd866e637231d87a12034d984bd1ecc42899d31b962e085f028f
-
SHA512
5c0ba0e1e98a190b34a7720568f97db3fb1ea56df04edff7afb201c3a6cf9d7cbe15b31a2291340afc2daca34ee1df6966fed916334d10640a7386888275372a
-
SSDEEP
6144:mxywrLKUAMhE790uaVpZkheoSRlzJSq6nk:mbrERHaroSXzoqf
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f8312b3f6f9ccd866e637231d87a12034d984bd1ecc42899d31b962e085f028f.exe"C:\Users\Admin\AppData\Local\Temp\f8312b3f6f9ccd866e637231d87a12034d984bd1ecc42899d31b962e085f028f.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
964KB
-
Filesize
964KB