Overview

overview

10

Static

static

7

819dcc47c3...a0.exe

windows7-x64

10

819dcc47c3...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    819dcc47c389e054b238c84ba72d871d18d7da3eb93883ebdedb0dd672467ba0

  • Size

    5.2MB

  • Sample

    230216-1b2zssbg6y

  • MD5

    4257f3587ecbd781c822549d7120e937

  • SHA1

    f392b377fe09e8e8017a40ccbbfc0c96fcb4b887

  • SHA256

    819dcc47c389e054b238c84ba72d871d18d7da3eb93883ebdedb0dd672467ba0

  • SHA512

    ab5572ac96d9a2e86c924bc4b5f176c38bb60f69adb2c624da6ea44619dd086ff59bc67da02f350148f8295c67ecec58395d6c450816d5350301fc000ab9f696

  • SSDEEP

    98304:4UT8DFGXgUOyFH2Wjz0Pj2M/W3KkwtfuSNWIjjMG5GbxnqzgzuEjM3jnr:4UcUXMiox/VuKB5GbBigvj2jnr

Score
10/10
blackmoonaspackv2bankertrojanupx

Malware Config

Targets

    • Target

      819dcc47c389e054b238c84ba72d871d18d7da3eb93883ebdedb0dd672467ba0

    • Size

      5.2MB

    • MD5

      4257f3587ecbd781c822549d7120e937

    • SHA1

      f392b377fe09e8e8017a40ccbbfc0c96fcb4b887

    • SHA256

      819dcc47c389e054b238c84ba72d871d18d7da3eb93883ebdedb0dd672467ba0

    • SHA512

      ab5572ac96d9a2e86c924bc4b5f176c38bb60f69adb2c624da6ea44619dd086ff59bc67da02f350148f8295c67ecec58395d6c450816d5350301fc000ab9f696

    • SSDEEP

      98304:4UT8DFGXgUOyFH2Wjz0Pj2M/W3KkwtfuSNWIjjMG5GbxnqzgzuEjM3jnr:4UcUXMiox/VuKB5GbBigvj2jnr

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks