Overview

overview

10

Static

static

7

8874ec28c1...30.exe

windows7-x64

10

8874ec28c1...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8874ec28c19564f577142205975a1e30

  • Size

    240KB

  • Sample

    240202-d7ta7sfcbl

  • MD5

    8874ec28c19564f577142205975a1e30

  • SHA1

    a74d2cb982c1fc37d44ac15b9f6fc5108105b23b

  • SHA256

    ab9ac2d05940c4d8882224e472560d06cf68fe06eeb543d74811f353d95bc79a

  • SHA512

    5da028d79789aaf1a74a552647737a3f91a251654e952e7d9b1c628e35475684897502b68ea422e6f097f699ab42fc1411a0eeaa43941304169ac272bd1303c8

  • SSDEEP

    6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNc71ra:y4wFHoS3eeWR9JGW594tjU6wg

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8874ec28c19564f577142205975a1e30

    • Size

      240KB

    • MD5

      8874ec28c19564f577142205975a1e30

    • SHA1

      a74d2cb982c1fc37d44ac15b9f6fc5108105b23b

    • SHA256

      ab9ac2d05940c4d8882224e472560d06cf68fe06eeb543d74811f353d95bc79a

    • SHA512

      5da028d79789aaf1a74a552647737a3f91a251654e952e7d9b1c628e35475684897502b68ea422e6f097f699ab42fc1411a0eeaa43941304169ac272bd1303c8

    • SSDEEP

      6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNc71ra:y4wFHoS3eeWR9JGW594tjU6wg

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks