Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
01-07-2024 02:26
General
-
Target
0a3be07da6d17bbf32cfe693563f1be4e83a0e2e6fe5c739ea58d51fbcc5fd0f.exe
-
Size
10.0MB
-
MD5
5ac2195af11c4528c3077fdc417493ac
-
SHA1
28e54ed02e9c22f2ca2d3f17b959b18fe4f6bcf4
-
SHA256
0a3be07da6d17bbf32cfe693563f1be4e83a0e2e6fe5c739ea58d51fbcc5fd0f
-
SHA512
ce0fa05af9dbcccd8a8dca6e54c490c472291045ce41282cd6da71d3eab3299b1ecff9af42a19970034b40cef5550aacc6686c7af60b1daa5dfe48ea07d8fb27
-
SSDEEP
196608:BnTh4skmKHU+Za1H57zp/ghEzjvCG56IqS5641kvhKJtOQRq0wY2rVIUMwrf:BqbviH57fvxqY64eYJtXt/2FhL
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a3be07da6d17bbf32cfe693563f1be4e83a0e2e6fe5c739ea58d51fbcc5fd0f.exe"C:\Users\Admin\AppData\Local\Temp\0a3be07da6d17bbf32cfe693563f1be4e83a0e2e6fe5c739ea58d51fbcc5fd0f.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1740-0-0x0000000000400000-0x00000000018B7000-memory.dmpFilesize
20.7MB
-
memory/1740-2-0x0000000000400000-0x00000000018B7000-memory.dmpFilesize
20.7MB