Overview

overview

10

Static

static

10

11fe2835a3...f2.exe

windows7-x64

10

11fe2835a3...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11fe2835a313e7ba8a875dd9fb360bec11ea5a2b3cb567fa689d28eb2a2acff2

  • Size

    15.8MB

  • Sample

    231012-m9nm6sha42

  • MD5

    0bd542e67a02d46abc16a25e27f723f1

  • SHA1

    b7fc6649b9efa5bd836672201ac1144532b98e5a

  • SHA256

    11fe2835a313e7ba8a875dd9fb360bec11ea5a2b3cb567fa689d28eb2a2acff2

  • SHA512

    c9e28fa657ecebddd68e1d4f9228aed58fb2ebdff41af9b26879881d52cdce9f157801027999c3d768b87d5d1d6c02b547304b45edcfabcb78fb27c6167c7dff

  • SSDEEP

    393216:DzWJAR741p5U+Ae0XHOmBq5vTMCrB2/IwAr:/Wq4a3e0mvwCrB2/M

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      11fe2835a313e7ba8a875dd9fb360bec11ea5a2b3cb567fa689d28eb2a2acff2

    • Size

      15.8MB

    • MD5

      0bd542e67a02d46abc16a25e27f723f1

    • SHA1

      b7fc6649b9efa5bd836672201ac1144532b98e5a

    • SHA256

      11fe2835a313e7ba8a875dd9fb360bec11ea5a2b3cb567fa689d28eb2a2acff2

    • SHA512

      c9e28fa657ecebddd68e1d4f9228aed58fb2ebdff41af9b26879881d52cdce9f157801027999c3d768b87d5d1d6c02b547304b45edcfabcb78fb27c6167c7dff

    • SSDEEP

      393216:DzWJAR741p5U+Ae0XHOmBq5vTMCrB2/IwAr:/Wq4a3e0mvwCrB2/M

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks