Overview

overview

10

Static

static

3

6c24cf9ab6...33.exe

windows7-x64

10

6c24cf9ab6...33.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c24cf9ab6a0d7ae053c347cafba6d458dd80a1e805d825344001bfeb4bbf133

  • Size

    2.3MB

  • Sample

    231002-m18lzsba73

  • MD5

    64a543bb8127bdd986ec60c4f140b83f

  • SHA1

    fcc7558f1381b7fa69e0a3276cfd155916dd486a

  • SHA256

    6c24cf9ab6a0d7ae053c347cafba6d458dd80a1e805d825344001bfeb4bbf133

  • SHA512

    973f2bcb0d7358b76fef65a1f3a535bd965db9ba8e5d67c161529092da36c50a9869611c469eb9330754ef9c4374d61c877c8935f7493f1cb0a1dcaa3ff35f02

  • SSDEEP

    49152:xTRRhtrtCL/PyztfKyLRmFpPOAq1aPo6dVkZigSZvHc4vsRT+:FrhtrtCL/PyZflLRWPnq1adkZYZfc4vR

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6c24cf9ab6a0d7ae053c347cafba6d458dd80a1e805d825344001bfeb4bbf133

    • Size

      2.3MB

    • MD5

      64a543bb8127bdd986ec60c4f140b83f

    • SHA1

      fcc7558f1381b7fa69e0a3276cfd155916dd486a

    • SHA256

      6c24cf9ab6a0d7ae053c347cafba6d458dd80a1e805d825344001bfeb4bbf133

    • SHA512

      973f2bcb0d7358b76fef65a1f3a535bd965db9ba8e5d67c161529092da36c50a9869611c469eb9330754ef9c4374d61c877c8935f7493f1cb0a1dcaa3ff35f02

    • SSDEEP

      49152:xTRRhtrtCL/PyztfKyLRmFpPOAq1aPo6dVkZigSZvHc4vsRT+:FrhtrtCL/PyZflLRWPnq1adkZYZfc4vR

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks