Overview

overview

10

Static

static

3

fef50acf5a...1f.dll

windows7-x64

5

fef50acf5a...1f.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fef50acf5a37faae281f21c1a606f80eab7b7bc3a040b7ba2d3f1f52626bbc1f

  • Size

    9.4MB

  • Sample

    240408-2zdgsaed52

  • MD5

    c4d58608ead5a5af392691ec8cef1a43

  • SHA1

    af942ba0585f926c157aedf20c6b6d680dadb0e6

  • SHA256

    fef50acf5a37faae281f21c1a606f80eab7b7bc3a040b7ba2d3f1f52626bbc1f

  • SHA512

    08e96983d97073a34816d54386f5acd95ba578c241078f3e04d86667c736ddd1ff344c8d535675bce3191d030b155a54ab5506a90f9756953f0de78a638d2867

  • SSDEEP

    196608:F+xU7u9lutdce06D4fbNpbgC/rY3dD4hImkpOlZyUZkgxEs:F4hEPDINpbF8ND35pOjZD

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      fef50acf5a37faae281f21c1a606f80eab7b7bc3a040b7ba2d3f1f52626bbc1f

    • Size

      9.4MB

    • MD5

      c4d58608ead5a5af392691ec8cef1a43

    • SHA1

      af942ba0585f926c157aedf20c6b6d680dadb0e6

    • SHA256

      fef50acf5a37faae281f21c1a606f80eab7b7bc3a040b7ba2d3f1f52626bbc1f

    • SHA512

      08e96983d97073a34816d54386f5acd95ba578c241078f3e04d86667c736ddd1ff344c8d535675bce3191d030b155a54ab5506a90f9756953f0de78a638d2867

    • SSDEEP

      196608:F+xU7u9lutdce06D4fbNpbgC/rY3dD4hImkpOlZyUZkgxEs:F4hEPDINpbF8ND35pOjZD

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks