Overview

overview

10

Static

static

3

bc0e34bfe7...fb.exe

windows7-x64

10

bc0e34bfe7...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc0e34bfe76b3476fe0fd345c388f07f429e98a34b1400bbe1f483425e2220fb

  • Size

    14.7MB

  • Sample

    230831-1bw4jsag58

  • MD5

    f604cd2d34abeb7a78915e8a1b0efff3

  • SHA1

    714feeb52b8a36b1d988010d06efcf9113bb443d

  • SHA256

    bc0e34bfe76b3476fe0fd345c388f07f429e98a34b1400bbe1f483425e2220fb

  • SHA512

    51253f208684eb7f1bd254cf881cb61e69b72efbceb228293d959d5bd34c271ac88d18849200bc489c3ae4e77ef6b4d6dd3bd29d03aa4f01c96459ba5939bfd5

  • SSDEEP

    393216:8z4G8adxVMgDzPlfSYusfo8NcIfsr8QLCJ66d:5aRMgv4Yun8UrFL666

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      bc0e34bfe76b3476fe0fd345c388f07f429e98a34b1400bbe1f483425e2220fb

    • Size

      14.7MB

    • MD5

      f604cd2d34abeb7a78915e8a1b0efff3

    • SHA1

      714feeb52b8a36b1d988010d06efcf9113bb443d

    • SHA256

      bc0e34bfe76b3476fe0fd345c388f07f429e98a34b1400bbe1f483425e2220fb

    • SHA512

      51253f208684eb7f1bd254cf881cb61e69b72efbceb228293d959d5bd34c271ac88d18849200bc489c3ae4e77ef6b4d6dd3bd29d03aa4f01c96459ba5939bfd5

    • SSDEEP

      393216:8z4G8adxVMgDzPlfSYusfo8NcIfsr8QLCJ66d:5aRMgv4Yun8UrFL666

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks