Overview

overview

10

Static

static

7

04467999.exe

windows7-x64

10

04467999.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04467999.exe

  • Size

    146KB

  • Sample

    230611-kdflkshd9z

  • MD5

    c789a3a89d17ab41fa660c3f59f376d4

  • SHA1

    eba0b3e7b3a76a23132cee507061f6987abe3137

  • SHA256

    91fa268b81a58456c39e93b97edf93d337211e3f2e6f5c74b953f4cb6776aa27

  • SHA512

    3aee37a638856e92b732ef923afa8ce4a7836555ba1f0159d9b23a8a72f2809bf3aad73f412d00b162403c5cfd0e75e4ee33b6eb4079aa0eefc83aa595e143c8

  • SSDEEP

    3072:SNsrb3QnnOxoxYGYn8C4zIB2eBH6CaucLD1kkQIpEH5xsXFHzZpbWjRBLFk/Pout:qsX3QnM8CDwgDcLxQI+ZxkHzf2RB2/PZ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      04467999.exe

    • Size

      146KB

    • MD5

      c789a3a89d17ab41fa660c3f59f376d4

    • SHA1

      eba0b3e7b3a76a23132cee507061f6987abe3137

    • SHA256

      91fa268b81a58456c39e93b97edf93d337211e3f2e6f5c74b953f4cb6776aa27

    • SHA512

      3aee37a638856e92b732ef923afa8ce4a7836555ba1f0159d9b23a8a72f2809bf3aad73f412d00b162403c5cfd0e75e4ee33b6eb4079aa0eefc83aa595e143c8

    • SSDEEP

      3072:SNsrb3QnnOxoxYGYn8C4zIB2eBH6CaucLD1kkQIpEH5xsXFHzZpbWjRBLFk/Pout:qsX3QnM8CDwgDcLxQI+ZxkHzf2RB2/PZ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks