Overview

overview

10

Static

static

3

69b2c77f4b...7a.exe

windows7-x64

10

69b2c77f4b...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69b2c77f4b01443306f493791453983588976e3b2e091bca289edfa745eda77a

  • Size

    2.3MB

  • Sample

    230607-yks25sfb96

  • MD5

    925da8f6d9daf4a747045092dfa00f45

  • SHA1

    9e0cdda54919e0968a34dc418b7ad32bd0dc6ff3

  • SHA256

    69b2c77f4b01443306f493791453983588976e3b2e091bca289edfa745eda77a

  • SHA512

    6e8a0313bb2781ba2cc631d314a363bd7231cd8cfa3165a5f1e32ca61b9e0e0e573edbda7323e96ea6a494e212f3edea186c807a6d72a199f442dcd8560118ba

  • SSDEEP

    49152:4VTl30e7fqneJeGI1jrrM20N7LX3fESdzX2zUaunG5a8s/0zB9ddWxKDTQ/k2X8:4ZyeMeMjM2SLfEY2UauG5D60zBHdWowS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      69b2c77f4b01443306f493791453983588976e3b2e091bca289edfa745eda77a

    • Size

      2.3MB

    • MD5

      925da8f6d9daf4a747045092dfa00f45

    • SHA1

      9e0cdda54919e0968a34dc418b7ad32bd0dc6ff3

    • SHA256

      69b2c77f4b01443306f493791453983588976e3b2e091bca289edfa745eda77a

    • SHA512

      6e8a0313bb2781ba2cc631d314a363bd7231cd8cfa3165a5f1e32ca61b9e0e0e573edbda7323e96ea6a494e212f3edea186c807a6d72a199f442dcd8560118ba

    • SSDEEP

      49152:4VTl30e7fqneJeGI1jrrM20N7LX3fESdzX2zUaunG5a8s/0zB9ddWxKDTQ/k2X8:4ZyeMeMjM2SLfEY2UauG5D60zBHdWowS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks