Overview

overview

10

Static

static

3

75f56b5b74...6a.exe

windows7-x64

75f56b5b74...6a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    75f56b5b74098fefc77b2dbf3bcc0d6a

  • Size

    103KB

  • Sample

    240126-a83dqaahf3

  • MD5

    75f56b5b74098fefc77b2dbf3bcc0d6a

  • SHA1

    39658d621003559abaf4f51e350ad9a07c0ef0db

  • SHA256

    5455001773735b15428b2f7b3adf830e9cf8499a04235f35adfbafd759b043a1

  • SHA512

    be377f913534493ef38bd820f31495396cfbbe63a71f816c84e2923b00893923b5470d63579eb69e91639fc360aa03bab50d5b2a873e0e6fc054c36b93cbb984

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9FrH5VBuEBQ:n3C9BRo7tvnJ9FvgEy

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      75f56b5b74098fefc77b2dbf3bcc0d6a

    • Size

      103KB

    • MD5

      75f56b5b74098fefc77b2dbf3bcc0d6a

    • SHA1

      39658d621003559abaf4f51e350ad9a07c0ef0db

    • SHA256

      5455001773735b15428b2f7b3adf830e9cf8499a04235f35adfbafd759b043a1

    • SHA512

      be377f913534493ef38bd820f31495396cfbbe63a71f816c84e2923b00893923b5470d63579eb69e91639fc360aa03bab50d5b2a873e0e6fc054c36b93cbb984

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9FrH5VBuEBQ:n3C9BRo7tvnJ9FvgEy

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks