Overview

overview

10

Static

static

10

5bf0b6554b...5a.exe

windows7-x64

10

5bf0b6554b...5a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bf0b6554b9e22990f1f73edcd9f4813753317037605db29cc9b5e9cc380cc5a

  • Size

    11.6MB

  • Sample

    230817-ylek5sed8s

  • MD5

    8a710f337c116046a62ce37fe36266a2

  • SHA1

    c71c788e616624d77b42ca4d9a03a24d8c8eee20

  • SHA256

    5bf0b6554b9e22990f1f73edcd9f4813753317037605db29cc9b5e9cc380cc5a

  • SHA512

    4dbcbc70422635ebf381616dee5e64581ce5b47194e707609eec7bc637ae72482b617fa3fa2ee82fef8fc00fa99c2131736d73632180995d3d6581122c7bd6ba

  • SSDEEP

    196608:bMos8b6qHNQ4aVdj5x6lU6BaPPLK0sAyKbhcf4FnUMd+pl6VLKH+Hsfg0xOfVlz:b/mqtQ4aVHx6ln4HLK0sAyQ9Jk0VLq+v

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5bf0b6554b9e22990f1f73edcd9f4813753317037605db29cc9b5e9cc380cc5a

    • Size

      11.6MB

    • MD5

      8a710f337c116046a62ce37fe36266a2

    • SHA1

      c71c788e616624d77b42ca4d9a03a24d8c8eee20

    • SHA256

      5bf0b6554b9e22990f1f73edcd9f4813753317037605db29cc9b5e9cc380cc5a

    • SHA512

      4dbcbc70422635ebf381616dee5e64581ce5b47194e707609eec7bc637ae72482b617fa3fa2ee82fef8fc00fa99c2131736d73632180995d3d6581122c7bd6ba

    • SSDEEP

      196608:bMos8b6qHNQ4aVdj5x6lU6BaPPLK0sAyKbhcf4FnUMd+pl6VLKH+Hsfg0xOfVlz:b/mqtQ4aVHx6ln4HLK0sAyQ9Jk0VLq+v

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks