Overview

overview

10

Static

static

7

c0fe4ddbf3...1c.exe

windows7-x64

10

c0fe4ddbf3...1c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c

  • Size

    11.6MB

  • Sample

    230825-299mzafd92

  • MD5

    c79c71bd88c4eda62393bfe1e5b32919

  • SHA1

    fee8f2ba06024d3d15fd1e0860cc6199a29f1dc2

  • SHA256

    c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c

  • SHA512

    d0c32de4f01ab8de010282b19d5c0ba35954528dbd4de3779e8ba09dc214197725aa2fe344cd5d17ab8f8069421d12b705c842a11f2e375657387dc35287ab2e

  • SSDEEP

    196608:BnTh4skZ357ixgBto5hK9jhJXYY1NeAbc1hyuNYlFSPvvhOvAdWD5ZkE4FYS:BqZ357ixgBtCYjHDeyuYAg5ZkE4FYS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c

    • Size

      11.6MB

    • MD5

      c79c71bd88c4eda62393bfe1e5b32919

    • SHA1

      fee8f2ba06024d3d15fd1e0860cc6199a29f1dc2

    • SHA256

      c0fe4ddbf3a1cab7e68f77cf8cda34d559c13e4cca7717ae4925708dff69d01c

    • SHA512

      d0c32de4f01ab8de010282b19d5c0ba35954528dbd4de3779e8ba09dc214197725aa2fe344cd5d17ab8f8069421d12b705c842a11f2e375657387dc35287ab2e

    • SSDEEP

      196608:BnTh4skZ357ixgBto5hK9jhJXYY1NeAbc1hyuNYlFSPvvhOvAdWD5ZkE4FYS:BqZ357ixgBtCYjHDeyuYAg5ZkE4FYS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks