Overview

overview

10

Static

static

83cb837bcf...55.exe

windows7-x64

10

83cb837bcf...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83cb837bcf16eddfa4087e7bfdd02576392596d6665c36030368eac3b5671055

  • Size

    617KB

  • Sample

    221127-2j57vshf2s

  • MD5

    a40acb3b2bab50ab8bb1ea9330528211

  • SHA1

    972663b4a724271cb0e2da5b165f842a4da924c4

  • SHA256

    83cb837bcf16eddfa4087e7bfdd02576392596d6665c36030368eac3b5671055

  • SHA512

    d1b6bf7dd9b4473c125ae929989a1225288d5e57fb4d9ad7118e00b746ac00fec7e642cc0a6430d1c2a94bfe7f0bd2f2dc84af3206591cd9bf0f85da65a19f76

  • SSDEEP

    12288:elOzm53eWqJXXUM2mslctPU+1W3r7HsVzlZ4SN1BLGgEow7Sa:mOzuOUM+Kd3g3rQd/7BLGgBw2a

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      83cb837bcf16eddfa4087e7bfdd02576392596d6665c36030368eac3b5671055

    • Size

      617KB

    • MD5

      a40acb3b2bab50ab8bb1ea9330528211

    • SHA1

      972663b4a724271cb0e2da5b165f842a4da924c4

    • SHA256

      83cb837bcf16eddfa4087e7bfdd02576392596d6665c36030368eac3b5671055

    • SHA512

      d1b6bf7dd9b4473c125ae929989a1225288d5e57fb4d9ad7118e00b746ac00fec7e642cc0a6430d1c2a94bfe7f0bd2f2dc84af3206591cd9bf0f85da65a19f76

    • SSDEEP

      12288:elOzm53eWqJXXUM2mslctPU+1W3r7HsVzlZ4SN1BLGgEow7Sa:mOzuOUM+Kd3g3rQd/7BLGgBw2a

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks