blackmoon | afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

afd29d473a...08.exe

windows7-x64

afd29d473a...08.exe

windows10-2004-x64

Sharing

General

Target

afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08
Size

4.7MB
Sample

241226-hklp3azjbn
MD5

cfbefe877fea8b8fd66d0ae87eb2d797
SHA1

cae43625e506257a6f187ccb01ce49b9b70214b2
SHA256

afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08
SHA512

a307524cfb2cbb0bd15a9f7c74ebf09daef07830db8ef266b854ca3c505cb17bb8586e60affa5e36f4ebeeb3d8b8572d431f749611dfa40694991f305ee87dbe
SSDEEP

98304:ppTxcHDdZOAW8Msd7cC7h62pUIIabx6M0wGfXRgI8bcH:pbsTOAZMQ7cpgUIRbAHw2XT8bs

Score

10^/10

blackmoon banker discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08
- Size
  
  4.7MB
- MD5
  
  cfbefe877fea8b8fd66d0ae87eb2d797
- SHA1
  
  cae43625e506257a6f187ccb01ce49b9b70214b2
- SHA256
  
  afd29d473ae5f95ca21d677404e6484a58419d674c5bf34e9004b7ebaab71b08
- SHA512
  
  a307524cfb2cbb0bd15a9f7c74ebf09daef07830db8ef266b854ca3c505cb17bb8586e60affa5e36f4ebeeb3d8b8572d431f749611dfa40694991f305ee87dbe
- SSDEEP
  
  98304:ppTxcHDdZOAW8Msd7cC7h62pUIIabx6M0wGfXRgI8bcH:pbsTOAZMQ7cpgUIRbAHw2XT8bs
Score

10^/10

blackmoon banker discovery trojan
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojan

behavioral2

blackmoonbankerdiscoverytrojan

© 2018-2025

Terms | Privacy