Overview

overview

10

Static

static

7

737ce22aa3...f2.dll

windows7-x64

10

737ce22aa3...f2.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    737ce22aa34496d7be3db0bbafb2dc03501155ed532c4a422d1ff2f006ec5cf2

  • Size

    4.0MB

  • Sample

    231116-tc8emsch65

  • MD5

    f3cdef8b8c0b1ed8606d20c2ebec222a

  • SHA1

    f7373185035adc10d75d64e745cd624c140a5681

  • SHA256

    737ce22aa34496d7be3db0bbafb2dc03501155ed532c4a422d1ff2f006ec5cf2

  • SHA512

    6a0c2fa6368c583c6250b5c870baa332e14415943749479ae55d2ad4adf35df07c22d0e316b13cfad926e5f0659629c515eb2aa6fb9a289d5a8bcdf0dee6bf96

  • SSDEEP

    49152:mE/uZakB6PGHKQmV2jqtH/fs1M/WEUpRO0YnMmPOfKGuG4gVzdysS095w4xYd4Ji:ZksMKQmV2js3fWzHnsRaDSioPk

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      737ce22aa34496d7be3db0bbafb2dc03501155ed532c4a422d1ff2f006ec5cf2

    • Size

      4.0MB

    • MD5

      f3cdef8b8c0b1ed8606d20c2ebec222a

    • SHA1

      f7373185035adc10d75d64e745cd624c140a5681

    • SHA256

      737ce22aa34496d7be3db0bbafb2dc03501155ed532c4a422d1ff2f006ec5cf2

    • SHA512

      6a0c2fa6368c583c6250b5c870baa332e14415943749479ae55d2ad4adf35df07c22d0e316b13cfad926e5f0659629c515eb2aa6fb9a289d5a8bcdf0dee6bf96

    • SSDEEP

      49152:mE/uZakB6PGHKQmV2jqtH/fs1M/WEUpRO0YnMmPOfKGuG4gVzdysS095w4xYd4Ji:ZksMKQmV2js3fWzHnsRaDSioPk

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks