Overview

overview

10

Static

static

10

8cf2b67e61...c6.exe

windows7-x64

10

8cf2b67e61...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cf2b67e6147ad64515d038d2bacf84c792c9527fc6e8311794d1143ac2804c6

  • Size

    220KB

  • Sample

    240319-jv2dyafa6w

  • MD5

    3c994650a939b97754ef7bf598a2a85a

  • SHA1

    75de13b125a1a4119a934caf8b04b8497deba0ca

  • SHA256

    8cf2b67e6147ad64515d038d2bacf84c792c9527fc6e8311794d1143ac2804c6

  • SHA512

    3dd031b7d5e62530fa5f9d13b89b739a383e3c50bf83dc87c851cc7cf46252c60e513f9c7b31ee5131f5b48aac7e8193e0d9f07a530b62aef366a726803ed42e

  • SSDEEP

    6144:0cm4FmowdHoSOI18yP0ddWX+a/zq6atGJ7TA:C4wFHoSF/P0ddWX+yzq6aw7TA

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8cf2b67e6147ad64515d038d2bacf84c792c9527fc6e8311794d1143ac2804c6

    • Size

      220KB

    • MD5

      3c994650a939b97754ef7bf598a2a85a

    • SHA1

      75de13b125a1a4119a934caf8b04b8497deba0ca

    • SHA256

      8cf2b67e6147ad64515d038d2bacf84c792c9527fc6e8311794d1143ac2804c6

    • SHA512

      3dd031b7d5e62530fa5f9d13b89b739a383e3c50bf83dc87c851cc7cf46252c60e513f9c7b31ee5131f5b48aac7e8193e0d9f07a530b62aef366a726803ed42e

    • SSDEEP

      6144:0cm4FmowdHoSOI18yP0ddWX+a/zq6atGJ7TA:C4wFHoSF/P0ddWX+yzq6aw7TA

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks