Overview

overview

10

Static

static

3

7275e317a6...0a.exe

windows7-x64

10

7275e317a6...0a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7275e317a6a892a8a831cfcc0507dc0a850a42bc9cd524a2bbf543779debef0a

  • Size

    448KB

  • Sample

    240319-1a9cgsgb33

  • MD5

    3d90e39b7b4d2de4be3b3239c2e1f1c1

  • SHA1

    36c1cd38fb72659c5d03c8b881d4b6e474922cda

  • SHA256

    7275e317a6a892a8a831cfcc0507dc0a850a42bc9cd524a2bbf543779debef0a

  • SHA512

    06328d156a93035b09ad5a116a668cca08e8d821f4317df6f661eea2260f89406ac850a0babf7de9db80a490a639512ff75434b50a153742fc8d6a188ad466e3

  • SSDEEP

    6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1H4G1NGl:d7Tc9Wj16A3StvxDNGl

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7275e317a6a892a8a831cfcc0507dc0a850a42bc9cd524a2bbf543779debef0a

    • Size

      448KB

    • MD5

      3d90e39b7b4d2de4be3b3239c2e1f1c1

    • SHA1

      36c1cd38fb72659c5d03c8b881d4b6e474922cda

    • SHA256

      7275e317a6a892a8a831cfcc0507dc0a850a42bc9cd524a2bbf543779debef0a

    • SHA512

      06328d156a93035b09ad5a116a668cca08e8d821f4317df6f661eea2260f89406ac850a0babf7de9db80a490a639512ff75434b50a153742fc8d6a188ad466e3

    • SSDEEP

      6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1H4G1NGl:d7Tc9Wj16A3StvxDNGl

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks