Overview

overview

10

Static

static

10

904e45514b...ec.exe

windows7-x64

10

904e45514b...ec.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    904e45514b79e3c4857730d2a346b0ec

  • Size

    426KB

  • Sample

    231222-p37tksbecl

  • MD5

    904e45514b79e3c4857730d2a346b0ec

  • SHA1

    719ed039c2aa312ae6bace4ff858201faeff0a12

  • SHA256

    f5069e7dd6ca814dd6f31c17a50611ec8629ec5f70b000def405d3e497c1a178

  • SHA512

    7c3626b5151803a8c4fcc09f60fa85e5593ea679f05fc12b589f4bc005c1adc33e60543ef5b70f19140190f8c20b88dbd82a93e7b3e90f25286220e3aec757fe

  • SSDEEP

    6144:kvk3Q5ibjnNuuXckaL7pbRBkce97awj7L7orT/b:kvMQ5ibjnwka3pbRC19Gwj7orT/b

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      904e45514b79e3c4857730d2a346b0ec

    • Size

      426KB

    • MD5

      904e45514b79e3c4857730d2a346b0ec

    • SHA1

      719ed039c2aa312ae6bace4ff858201faeff0a12

    • SHA256

      f5069e7dd6ca814dd6f31c17a50611ec8629ec5f70b000def405d3e497c1a178

    • SHA512

      7c3626b5151803a8c4fcc09f60fa85e5593ea679f05fc12b589f4bc005c1adc33e60543ef5b70f19140190f8c20b88dbd82a93e7b3e90f25286220e3aec757fe

    • SSDEEP

      6144:kvk3Q5ibjnNuuXckaL7pbRBkce97awj7L7orT/b:kvMQ5ibjnwka3pbRC19Gwj7orT/b

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks