Overview

overview

10

Static

static

7

04c87d03a2...JC.exe

windows7-x64

10

04c87d03a2...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04c87d03a20b05ea756db5c9e6929750_exe32_JC.exe

  • Size

    460KB

  • Sample

    231015-thrn3sba64

  • MD5

    04c87d03a20b05ea756db5c9e6929750

  • SHA1

    81fa2292e6f6461c9debf488011bb0d2855b3511

  • SHA256

    1e1bcaafe725c67d9d57bc2965657d97cde8362c250c19a2c18017c68723dc91

  • SHA512

    270278357f537a4f5f34a4891d110e1a74144c77685d866fdb25647ee060369d63fd027f23b26645308222da62d9d0ef06a5d7285595e5cf2a3b8565e54d589f

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V5:VeR0oykayRFp3lztP+OKaf1V5

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      04c87d03a20b05ea756db5c9e6929750_exe32_JC.exe

    • Size

      460KB

    • MD5

      04c87d03a20b05ea756db5c9e6929750

    • SHA1

      81fa2292e6f6461c9debf488011bb0d2855b3511

    • SHA256

      1e1bcaafe725c67d9d57bc2965657d97cde8362c250c19a2c18017c68723dc91

    • SHA512

      270278357f537a4f5f34a4891d110e1a74144c77685d866fdb25647ee060369d63fd027f23b26645308222da62d9d0ef06a5d7285595e5cf2a3b8565e54d589f

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V5:VeR0oykayRFp3lztP+OKaf1V5

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks