Overview

overview

10

Static

static

7

16c9bd1966...2a.exe

windows7-x64

10

16c9bd1966...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16c9bd1966f4e9bffb8374491a9dd8ca407baceaf3fb4ce697e19e40b8cd932a

  • Size

    1.2MB

  • Sample

    230627-xsqrbafb67

  • MD5

    aa45db1b9e518b5b1381cb287fd55d7e

  • SHA1

    40abe035a9c86264a6811b0ed23665eb9826fdd4

  • SHA256

    16c9bd1966f4e9bffb8374491a9dd8ca407baceaf3fb4ce697e19e40b8cd932a

  • SHA512

    d615e475fbd79ac4da0385690e84b60213344be8a7e9886c33a722938920af43bc7e49dd95f64dda4445b106a7f6ef1d4a98f334d67d293162be295a485c45ff

  • SSDEEP

    24576:3FlVDOD/V6S9ayfaNQa4arQWW2CL+9xI5Dsqgnmy4zmjSQq5:3vVKzV6uLfaJjrQ5+vI5wdnD4zmul5

Score
10/10
blackmoonaspackv2bankertrojanupx

Malware Config

Targets

    • Target

      16c9bd1966f4e9bffb8374491a9dd8ca407baceaf3fb4ce697e19e40b8cd932a

    • Size

      1.2MB

    • MD5

      aa45db1b9e518b5b1381cb287fd55d7e

    • SHA1

      40abe035a9c86264a6811b0ed23665eb9826fdd4

    • SHA256

      16c9bd1966f4e9bffb8374491a9dd8ca407baceaf3fb4ce697e19e40b8cd932a

    • SHA512

      d615e475fbd79ac4da0385690e84b60213344be8a7e9886c33a722938920af43bc7e49dd95f64dda4445b106a7f6ef1d4a98f334d67d293162be295a485c45ff

    • SSDEEP

      24576:3FlVDOD/V6S9ayfaNQa4arQWW2CL+9xI5Dsqgnmy4zmjSQq5:3vVKzV6uLfaJjrQ5+vI5wdnD4zmul5

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks