Overview

overview

10

Static

static

10

d6a42e08a9...58.exe

windows7-x64

10

d6a42e08a9...58.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6a42e08a921bb148489e61f954ad418e86e0d42f6950daf985793ff10bdda58

  • Size

    6.5MB

  • Sample

    240308-22cchahe96

  • MD5

    1ce5d460ddb001135202d4f3b6799543

  • SHA1

    7f7a01a84fdb658d091f48fffee66d17311a8297

  • SHA256

    d6a42e08a921bb148489e61f954ad418e86e0d42f6950daf985793ff10bdda58

  • SHA512

    b68f82fee81091c59e167cf8da8425429047bbdec1d566a9e187b1e9c5974e785fc3cf8698c5e04e926768c44d8741bbedcbcc2f5a35f43a32b11fede25b34d0

  • SSDEEP

    98304:ycPB7pubZqyCkRWxLH6SqnGg1gO8sLHJYqdwkLcHHWO8q7ks8ETN5:ycPB7pVyCkwLHYThLHJjAFeEh5

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d6a42e08a921bb148489e61f954ad418e86e0d42f6950daf985793ff10bdda58

    • Size

      6.5MB

    • MD5

      1ce5d460ddb001135202d4f3b6799543

    • SHA1

      7f7a01a84fdb658d091f48fffee66d17311a8297

    • SHA256

      d6a42e08a921bb148489e61f954ad418e86e0d42f6950daf985793ff10bdda58

    • SHA512

      b68f82fee81091c59e167cf8da8425429047bbdec1d566a9e187b1e9c5974e785fc3cf8698c5e04e926768c44d8741bbedcbcc2f5a35f43a32b11fede25b34d0

    • SSDEEP

      98304:ycPB7pubZqyCkRWxLH6SqnGg1gO8sLHJYqdwkLcHHWO8q7ks8ETN5:ycPB7pVyCkwLHYThLHJjAFeEh5

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks