Overview

overview

10

Static

static

10

2123b967bd...52.exe

windows7-x64

10

2123b967bd...52.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2123b967bdab82370fc9616f35b4a1914c7c8bc9aa1adb6829f85392e0845252

  • Size

    78KB

  • Sample

    240305-w5mdzsef87

  • MD5

    d0cd8a183519dcacf59ea8f4ed50e4de

  • SHA1

    5bcf790ad94a1021b575dd340c84de584be2dfd7

  • SHA256

    2123b967bdab82370fc9616f35b4a1914c7c8bc9aa1adb6829f85392e0845252

  • SHA512

    530d8d8ab531725c85c157e6ab6d9b5f1bc5b9acb86e5d34714e6831e9746856f1af175e183d9db38522542b7276c8dcf10aae20b1b12385ad9d749c25e8c2a0

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TVb:zhOmTsF93UYfwC6GIoutiTU2HVS6R

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      2123b967bdab82370fc9616f35b4a1914c7c8bc9aa1adb6829f85392e0845252

    • Size

      78KB

    • MD5

      d0cd8a183519dcacf59ea8f4ed50e4de

    • SHA1

      5bcf790ad94a1021b575dd340c84de584be2dfd7

    • SHA256

      2123b967bdab82370fc9616f35b4a1914c7c8bc9aa1adb6829f85392e0845252

    • SHA512

      530d8d8ab531725c85c157e6ab6d9b5f1bc5b9acb86e5d34714e6831e9746856f1af175e183d9db38522542b7276c8dcf10aae20b1b12385ad9d749c25e8c2a0

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TVb:zhOmTsF93UYfwC6GIoutiTU2HVS6R

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks