Overview

overview

10

Static

static

10

289bb2c3d4...93.exe

windows7-x64

10

289bb2c3d4...93.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    289bb2c3d4ca96f57a39c88d1c69c87f2acbe421619156e3405424bf2afca693

  • Size

    453KB

  • Sample

    240319-w9ymtaca9v

  • MD5

    f76ac84585af93f38c3c0623c28e67c1

  • SHA1

    4806e86ea497c2c1687cd98260dcc51ce26904ac

  • SHA256

    289bb2c3d4ca96f57a39c88d1c69c87f2acbe421619156e3405424bf2afca693

  • SHA512

    2bc9ad9324c3a078893a0b5df0383c58669132b998c069275de423d3e21fdc84132fc20568f955e97e43d18de8874e2cb7d5b1ee35d7af359fb7c13d7c6d2a87

  • SSDEEP

    12288:y4wFHoS3eFp3IDvSbh5nPYERAAUDCa4NYmN:HFp3lz1XUDCaGYmN

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      289bb2c3d4ca96f57a39c88d1c69c87f2acbe421619156e3405424bf2afca693

    • Size

      453KB

    • MD5

      f76ac84585af93f38c3c0623c28e67c1

    • SHA1

      4806e86ea497c2c1687cd98260dcc51ce26904ac

    • SHA256

      289bb2c3d4ca96f57a39c88d1c69c87f2acbe421619156e3405424bf2afca693

    • SHA512

      2bc9ad9324c3a078893a0b5df0383c58669132b998c069275de423d3e21fdc84132fc20568f955e97e43d18de8874e2cb7d5b1ee35d7af359fb7c13d7c6d2a87

    • SSDEEP

      12288:y4wFHoS3eFp3IDvSbh5nPYERAAUDCa4NYmN:HFp3lz1XUDCaGYmN

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks