Overview

overview

10

Static

static

7

1325f650d6...JC.exe

windows7-x64

10

1325f650d6...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1325f650d6779e89a3d539898b23fac0_exe32_JC.exe

  • Size

    148KB

  • Sample

    231015-vxyllsbg43

  • MD5

    1325f650d6779e89a3d539898b23fac0

  • SHA1

    11b1835fe53be0a0e7fa609b1685ce69f02a1b75

  • SHA256

    c2ca0dc96711047544c5e5cea9cbbd101fe3af1f569e33c4bb5b679a0a475224

  • SHA512

    e0eb577edd1c35b8012ca64c45e63073910589b7c9a17ecca8b057bd663883c3a140e987833a62746a4756bfb6f641eec84765ffa4e29f24b6edb8eab4aa1a81

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuIIu+9j4v2mk:9cm4FmowdHoS4BfIu+9jG2v

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1325f650d6779e89a3d539898b23fac0_exe32_JC.exe

    • Size

      148KB

    • MD5

      1325f650d6779e89a3d539898b23fac0

    • SHA1

      11b1835fe53be0a0e7fa609b1685ce69f02a1b75

    • SHA256

      c2ca0dc96711047544c5e5cea9cbbd101fe3af1f569e33c4bb5b679a0a475224

    • SHA512

      e0eb577edd1c35b8012ca64c45e63073910589b7c9a17ecca8b057bd663883c3a140e987833a62746a4756bfb6f641eec84765ffa4e29f24b6edb8eab4aa1a81

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuIIu+9j4v2mk:9cm4FmowdHoS4BfIu+9jG2v

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks