Overview

overview

10

Static

static

803f49e8f4...a8.exe

windows7-x64

10

803f49e8f4...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    803f49e8f4f7873ba236fa2cda24a7134d5763eef297a5dfb4aba5f26051b3a8

  • Size

    739KB

  • Sample

    221129-hw4p1sag31

  • MD5

    416820bf37862a1162d85d9470d927d0

  • SHA1

    376ca85ad426c47f6f4b1c8e8d897e3f2d7f4fc1

  • SHA256

    803f49e8f4f7873ba236fa2cda24a7134d5763eef297a5dfb4aba5f26051b3a8

  • SHA512

    f856b25c33c474c2bbbdea4da52ac7e43e9a852b9e15d49859fcd6962c1f896f239c270ef6367e659e42a0357015d6b9e1f368c9d4a3781619cb15e633f65ba6

  • SSDEEP

    12288:iJ+sfkS6arVI34ShtmhmTkzkukqeub91ljUuuzj1WPCQfW:YkJ7hghmKklub916dHzQO

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      803f49e8f4f7873ba236fa2cda24a7134d5763eef297a5dfb4aba5f26051b3a8

    • Size

      739KB

    • MD5

      416820bf37862a1162d85d9470d927d0

    • SHA1

      376ca85ad426c47f6f4b1c8e8d897e3f2d7f4fc1

    • SHA256

      803f49e8f4f7873ba236fa2cda24a7134d5763eef297a5dfb4aba5f26051b3a8

    • SHA512

      f856b25c33c474c2bbbdea4da52ac7e43e9a852b9e15d49859fcd6962c1f896f239c270ef6367e659e42a0357015d6b9e1f368c9d4a3781619cb15e633f65ba6

    • SSDEEP

      12288:iJ+sfkS6arVI34ShtmhmTkzkukqeub91ljUuuzj1WPCQfW:YkJ7hghmKklub916dHzQO

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks