Overview

overview

10

Static

static

7

??????.exe

windows7-x64

10

??????.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d969f98a7dbc486644def9170d81dabb25cb8228d2097da076de805833db2df

  • Size

    13.1MB

  • Sample

    240630-sypzrazela

  • MD5

    502174b243ece86541f68d5757badf62

  • SHA1

    59e6b01c1ab57d48a9e1a91986c65e320f000aa5

  • SHA256

    4d969f98a7dbc486644def9170d81dabb25cb8228d2097da076de805833db2df

  • SHA512

    f313afade587ad9ccaaa1400e6b0aa8a1321e3d8bd7693a2e40647bcce787851508c877e71f0b2a1bba4a6411efe90578936503857f7b75e0bccc0ad9e8e069e

  • SSDEEP

    393216:Fv5Crp0nzTy0phSSsyV0kEvpW8cPHfu7pD72Od:ThpEdyCi/mpuOd

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      ??????.exe

    • Size

      13.2MB

    • MD5

      4d65014ca7fab35caae9d8ac24815e4b

    • SHA1

      55d201d950e1053905f191f437962ea4992dbe86

    • SHA256

      7d1e09800698caf357c17ddc003e443143a9748230a04acbcb0d3487a0a622c4

    • SHA512

      bb668f2a0b42af7b7602c2a016966dace91144d21f9aee03a685190a172b3310dd580fcdac5bc1d3ec68b95fd52c01ceb2a48f1adbd4c13aebe07c1e1130dc19

    • SSDEEP

      393216:gPDPWrjWiaqTjWU5JUkCoAvpyS+Vb3izzn72YZ:YKO8JUN0b+zSYZ

    Score
    10/10
    blackmoonaspackv2bankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks