Overview

overview

10

Static

static

10

downloader_60_cat.exe

windows7-x64

10

downloader_60_cat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    downloader_60_cat.exe

  • Size

    9.1MB

  • Sample

    231230-qdvndsedaj

  • MD5

    27dcca14823d7cb8ddcc2b12368548a6

  • SHA1

    e0abc6f5711fa1782d1eaec492215ec77981341d

  • SHA256

    8054066b3c3c28770c19141ae30f554752c63573dbabfcf9259d90652d4d5474

  • SHA512

    54dd72097443f3939f98e9fc0db4d2b15d47809baa2b4315b11076ca4a9b3ac603607275f0ee8693841e3af35dc5ec230fe338d3896b895df74bc0aa3097eed0

  • SSDEEP

    196608:sbsJk4Ufvq8BRu+NL5GjweEiFwfMSSUaShd2WBTGWVq4wAfH1gMRuBcjmSSQsG5E:sbKUfi8BU+N7FGaBd2WBzq4hfV3LSRG

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      downloader_60_cat.exe

    • Size

      9.1MB

    • MD5

      27dcca14823d7cb8ddcc2b12368548a6

    • SHA1

      e0abc6f5711fa1782d1eaec492215ec77981341d

    • SHA256

      8054066b3c3c28770c19141ae30f554752c63573dbabfcf9259d90652d4d5474

    • SHA512

      54dd72097443f3939f98e9fc0db4d2b15d47809baa2b4315b11076ca4a9b3ac603607275f0ee8693841e3af35dc5ec230fe338d3896b895df74bc0aa3097eed0

    • SSDEEP

      196608:sbsJk4Ufvq8BRu+NL5GjweEiFwfMSSUaShd2WBTGWVq4wAfH1gMRuBcjmSSQsG5E:sbKUfi8BU+N7FGaBd2WBzq4hfV3LSRG

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks