Overview

overview

10

Static

static

3

c8869acbba...cf.exe

windows7-x64

10

c8869acbba...cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8869acbba926ea7aabadaab470f92effd86c5dd45516b17716e286ca52403cf

  • Size

    64KB

  • Sample

    240313-a6ql5shg62

  • MD5

    bf60b950b1fead8a9107734fdc5d4780

  • SHA1

    cd6d1b185a6e5f35df72203257f2208ea51a2347

  • SHA256

    c8869acbba926ea7aabadaab470f92effd86c5dd45516b17716e286ca52403cf

  • SHA512

    958b6bf34f50aeb42cec89a30c688306a6fabbced97408d9aa2cfb0d6d3abba60486c4ce8c62956432e92318db5a7f7a95d808e00823a340b45c56594bb3e1e9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUPqrDS:ymb3NkkiQ3mdBjF0yUmO

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c8869acbba926ea7aabadaab470f92effd86c5dd45516b17716e286ca52403cf

    • Size

      64KB

    • MD5

      bf60b950b1fead8a9107734fdc5d4780

    • SHA1

      cd6d1b185a6e5f35df72203257f2208ea51a2347

    • SHA256

      c8869acbba926ea7aabadaab470f92effd86c5dd45516b17716e286ca52403cf

    • SHA512

      958b6bf34f50aeb42cec89a30c688306a6fabbced97408d9aa2cfb0d6d3abba60486c4ce8c62956432e92318db5a7f7a95d808e00823a340b45c56594bb3e1e9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUPqrDS:ymb3NkkiQ3mdBjF0yUmO

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks