Overview

overview

10

Static

static

10

050f450288...38.exe

windows7-x64

10

050f450288...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    050f45028831717259d3270306c7cfae152289af950abcf7b83548ea3e8b4c38

  • Size

    232KB

  • Sample

    240503-wyz2hach5x

  • MD5

    50fc3d172fd66f7aaab43f8fe1f20d71

  • SHA1

    bd393ab0e814c7440a58dac646dfa1384a129ac6

  • SHA256

    050f45028831717259d3270306c7cfae152289af950abcf7b83548ea3e8b4c38

  • SHA512

    d22210087e5017349c77f0e0921a9c2cb1ed6d50f5c85b991ee9797ea91a7a179bae0127fa7e8f2b8dd5b4252d41a971e63ef028444041d4e3718a7f3fc1b662

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+4:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      050f45028831717259d3270306c7cfae152289af950abcf7b83548ea3e8b4c38

    • Size

      232KB

    • MD5

      50fc3d172fd66f7aaab43f8fe1f20d71

    • SHA1

      bd393ab0e814c7440a58dac646dfa1384a129ac6

    • SHA256

      050f45028831717259d3270306c7cfae152289af950abcf7b83548ea3e8b4c38

    • SHA512

      d22210087e5017349c77f0e0921a9c2cb1ed6d50f5c85b991ee9797ea91a7a179bae0127fa7e8f2b8dd5b4252d41a971e63ef028444041d4e3718a7f3fc1b662

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+4:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks