Overview

overview

10

Static

static

7

9ca9e37158...ef.exe

windows7-x64

10

9ca9e37158...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ca9e37158b1019446c91f0e8908d2ef

  • Size

    393KB

  • Sample

    231222-qgxxxshdc4

  • MD5

    9ca9e37158b1019446c91f0e8908d2ef

  • SHA1

    a86cd35566a05be268e7d2474fd2326212d1195c

  • SHA256

    51bfbe2fa89dc14eb764fd60c52edd6e1786f90ccfc97222520e20cf8a3f0daf

  • SHA512

    81b61bd8b2ba6556e1b8504c239d902147bcc0d36eea7e736839a1fe5a23f1e34ef2b40d01b6c5041e088aab19c9f3d3dbf7e9ebe0faa273d32c6192a3f16fea

  • SSDEEP

    6144:5cm4FmowdHoSHt251UriZFwu1b26X1wjdgGpmHVD+n4H7:D4wFHoSHYHUrAwqzQNcHtH7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9ca9e37158b1019446c91f0e8908d2ef

    • Size

      393KB

    • MD5

      9ca9e37158b1019446c91f0e8908d2ef

    • SHA1

      a86cd35566a05be268e7d2474fd2326212d1195c

    • SHA256

      51bfbe2fa89dc14eb764fd60c52edd6e1786f90ccfc97222520e20cf8a3f0daf

    • SHA512

      81b61bd8b2ba6556e1b8504c239d902147bcc0d36eea7e736839a1fe5a23f1e34ef2b40d01b6c5041e088aab19c9f3d3dbf7e9ebe0faa273d32c6192a3f16fea

    • SSDEEP

      6144:5cm4FmowdHoSHt251UriZFwu1b26X1wjdgGpmHVD+n4H7:D4wFHoSHYHUrAwqzQNcHtH7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks