Overview

overview

10

Static

static

10

4c6b50afc7...63.exe

windows7-x64

10

4c6b50afc7...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c6b50afc7759605ef9c7de7655f50a360a8b9e269cbf029cc40554b7bc15063

  • Size

    185KB

  • Sample

    240503-1cqyxsac42

  • MD5

    1c08e3717aa730854c5f4bc299c8ae25

  • SHA1

    1a33707b47a79ba6be08311128ab592632f77994

  • SHA256

    4c6b50afc7759605ef9c7de7655f50a360a8b9e269cbf029cc40554b7bc15063

  • SHA512

    0bbcd8d6ac74079912ac1b40b3cd90a44c79e05ed900c2375ac92f6aa812d5d7f3f161ba774e0f4c31186cf9510d49c670913e06ff7abc77edb0ff8d4859fdc1

  • SSDEEP

    3072:3hOmTsF93UYfwC6GIoutw8YcvrqrE66kropO6BWlPFH4tw1D43eMz:3cm4FmowdHoSzhraHcpOFltH4twl43vz

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      4c6b50afc7759605ef9c7de7655f50a360a8b9e269cbf029cc40554b7bc15063

    • Size

      185KB

    • MD5

      1c08e3717aa730854c5f4bc299c8ae25

    • SHA1

      1a33707b47a79ba6be08311128ab592632f77994

    • SHA256

      4c6b50afc7759605ef9c7de7655f50a360a8b9e269cbf029cc40554b7bc15063

    • SHA512

      0bbcd8d6ac74079912ac1b40b3cd90a44c79e05ed900c2375ac92f6aa812d5d7f3f161ba774e0f4c31186cf9510d49c670913e06ff7abc77edb0ff8d4859fdc1

    • SSDEEP

      3072:3hOmTsF93UYfwC6GIoutw8YcvrqrE66kropO6BWlPFH4tw1D43eMz:3cm4FmowdHoSzhraHcpOFltH4twl43vz

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks