Overview

overview

10

Static

static

c9ca41e6ed...fe.exe

windows7-x64

10

c9ca41e6ed...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9ca41e6edbf02d6c21e3a9f6da999202e2c5f60e3e72987ff81e18c1f9a70fe

  • Size

    2.8MB

  • Sample

    221123-hbmwrsdg33

  • MD5

    459cdd6b403447d25ce3ef40200610e3

  • SHA1

    808e97855171eaebea3ea15c23c036a210f71360

  • SHA256

    c9ca41e6edbf02d6c21e3a9f6da999202e2c5f60e3e72987ff81e18c1f9a70fe

  • SHA512

    7792dd355c394bda6a0b294959e6feacd516183c9b261829370d45a6f628c39e39cf13d0dcbffdef37225608855c4253ebe64e8727e137c0ccab771adcb617b6

  • SSDEEP

    49152:EKa5cFxFUPKt8GjCWCLsH1h7iAp4m9VQCuANY0vEGaHqXXvhZml74NH:EKFxF8SeWoUEyB9VTN5ECX/hweH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c9ca41e6edbf02d6c21e3a9f6da999202e2c5f60e3e72987ff81e18c1f9a70fe

    • Size

      2.8MB

    • MD5

      459cdd6b403447d25ce3ef40200610e3

    • SHA1

      808e97855171eaebea3ea15c23c036a210f71360

    • SHA256

      c9ca41e6edbf02d6c21e3a9f6da999202e2c5f60e3e72987ff81e18c1f9a70fe

    • SHA512

      7792dd355c394bda6a0b294959e6feacd516183c9b261829370d45a6f628c39e39cf13d0dcbffdef37225608855c4253ebe64e8727e137c0ccab771adcb617b6

    • SSDEEP

      49152:EKa5cFxFUPKt8GjCWCLsH1h7iAp4m9VQCuANY0vEGaHqXXvhZml74NH:EKFxF8SeWoUEyB9VTN5ECX/hweH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks