Overview

overview

10

Static

static

1

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    2.7MB

  • Sample

    230319-gpvyvshc2z

  • MD5

    4570ee55ec47299b547232e3463feff1

  • SHA1

    6626b895c309b6592deb2e6b2fffaa52049a3e73

  • SHA256

    f3a9d6f2975046adf3b4e8fd36d93157ffe91db28f2f7e0344ae26ebcd2102ab

  • SHA512

    d6bd5b74a227725e602657467f14d3ea464f78e2b9edabe78a19cc56541fcebba478c40187b5219a78e79cbfa7e050ecd3062b2a44913a3b1c13e0498b267ee1

  • SSDEEP

    49152:+Py1srbLbywBoM631OztfKyLRmFpPOAq1aPo6dVkZigSZvHc4vsDT:W9rbLby3h38ZflLRWPnq1adkZYZfc4v

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      tmp

    • Size

      2.7MB

    • MD5

      4570ee55ec47299b547232e3463feff1

    • SHA1

      6626b895c309b6592deb2e6b2fffaa52049a3e73

    • SHA256

      f3a9d6f2975046adf3b4e8fd36d93157ffe91db28f2f7e0344ae26ebcd2102ab

    • SHA512

      d6bd5b74a227725e602657467f14d3ea464f78e2b9edabe78a19cc56541fcebba478c40187b5219a78e79cbfa7e050ecd3062b2a44913a3b1c13e0498b267ee1

    • SSDEEP

      49152:+Py1srbLbywBoM631OztfKyLRmFpPOAq1aPo6dVkZigSZvHc4vsDT:W9rbLby3h38ZflLRWPnq1adkZYZfc4v

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks