Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    416KB

  • Sample

    230305-yd4v3ahc52

  • MD5

    f1e9f525bbaa7d32a6f7b544098074fb

  • SHA1

    850996be50d56c897b5a372f83adaf109fec31f8

  • SHA256

    693cd4269ce18007324ae027ef8d572430e4862af307c5459b0a1486f4afee63

  • SHA512

    f6e165b9b19725fab9deb4879e41d953f0cb810954d894ab3830909e102cd059b94b42472aaab12dc87f36a9a254a649b7f229e732ac75cedbe515402e7fcc9c

  • SSDEEP

    12288:XfOYDXi1q4GXioV4SaBMniBRR+5k/81Jee:TDy1q4sVc8D5g+

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      tmp

    • Size

      416KB

    • MD5

      f1e9f525bbaa7d32a6f7b544098074fb

    • SHA1

      850996be50d56c897b5a372f83adaf109fec31f8

    • SHA256

      693cd4269ce18007324ae027ef8d572430e4862af307c5459b0a1486f4afee63

    • SHA512

      f6e165b9b19725fab9deb4879e41d953f0cb810954d894ab3830909e102cd059b94b42472aaab12dc87f36a9a254a649b7f229e732ac75cedbe515402e7fcc9c

    • SSDEEP

      12288:XfOYDXi1q4GXioV4SaBMniBRR+5k/81Jee:TDy1q4sVc8D5g+

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks