Overview

overview

10

Static

static

10

1fa0a43106...04.exe

windows7-x64

10

1fa0a43106...04.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1fa0a431063ea315ee415f2a5a7cd519680841d3240ed6c0c98d444e1130bf04

  • Size

    15.5MB

  • Sample

    231007-hyd75shf7s

  • MD5

    bc008838abd40587e0566b9499862fed

  • SHA1

    3351665aa486aeb87020edae00be19ebc84fb298

  • SHA256

    1fa0a431063ea315ee415f2a5a7cd519680841d3240ed6c0c98d444e1130bf04

  • SHA512

    21019c533aa23dc35dbce2d8304e52625aab5fa35afec0d7b8627ad54a64486c9d2d7a07cdd0be44b25c6d389a44cd6dc9963e92c714eca8fc26c9e1039e1391

  • SSDEEP

    196608:dWQXtsmKOdm/8Lbn/dTwUks3WadSDqz78oSCtLdfDJA/8q2nUj/osulCsnRJlbvH:d/fKO0gDW/EWCHnn8gzQ8huink+Pl/

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1fa0a431063ea315ee415f2a5a7cd519680841d3240ed6c0c98d444e1130bf04

    • Size

      15.5MB

    • MD5

      bc008838abd40587e0566b9499862fed

    • SHA1

      3351665aa486aeb87020edae00be19ebc84fb298

    • SHA256

      1fa0a431063ea315ee415f2a5a7cd519680841d3240ed6c0c98d444e1130bf04

    • SHA512

      21019c533aa23dc35dbce2d8304e52625aab5fa35afec0d7b8627ad54a64486c9d2d7a07cdd0be44b25c6d389a44cd6dc9963e92c714eca8fc26c9e1039e1391

    • SSDEEP

      196608:dWQXtsmKOdm/8Lbn/dTwUks3WadSDqz78oSCtLdfDJA/8q2nUj/osulCsnRJlbvH:d/fKO0gDW/EWCHnn8gzQ8huink+Pl/

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks