Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    416KB

  • Sample

    230305-phz81agd72

  • MD5

    98c3cbd2910bf9135c230371ca1cfcb2

  • SHA1

    6465f6350999cbb2faec6a2fe7602b8a58e33aca

  • SHA256

    4dcf73dc989c9bfe797734db6eedf6aef42b8e1f0723d806f8d64bcc48b5bfce

  • SHA512

    341051f897d2db527eac29831289009aa65a3bf607712751a6a4a0639f3a1bf41b18d71d33cd89ce0f70616b0e93496dd7a923328e16c5a26e2280b7110d2901

  • SSDEEP

    12288:LgUr1+gvyOlC7wiVcub1ii+Kta0V2tRl0l9KJ:LZ1+Ola9VJaptRA9

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      tmp

    • Size

      416KB

    • MD5

      98c3cbd2910bf9135c230371ca1cfcb2

    • SHA1

      6465f6350999cbb2faec6a2fe7602b8a58e33aca

    • SHA256

      4dcf73dc989c9bfe797734db6eedf6aef42b8e1f0723d806f8d64bcc48b5bfce

    • SHA512

      341051f897d2db527eac29831289009aa65a3bf607712751a6a4a0639f3a1bf41b18d71d33cd89ce0f70616b0e93496dd7a923328e16c5a26e2280b7110d2901

    • SSDEEP

      12288:LgUr1+gvyOlC7wiVcub1ii+Kta0V2tRl0l9KJ:LZ1+Ola9VJaptRA9

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks