Overview

overview

10

Static

static

3

36e1f7e8fc...30.exe

windows7-x64

10

36e1f7e8fc...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36e1f7e8fcc0e63f33c604d033050130

  • Size

    179KB

  • Sample

    240409-12wwgahc5w

  • MD5

    36e1f7e8fcc0e63f33c604d033050130

  • SHA1

    19e4e103c7f68978d2011a4d89ec2fae6f6b909f

  • SHA256

    280cc8b23c75622e2ca7f0116ecf071c92397b1ba3670de6fa17d4dd5f1f728e

  • SHA512

    2b9260b3cc813614cf07410219e35c97b726f700c6f01ef436f958b3b59824a644b434790fa49c9bb85f4b59ca7dcc5a71932cb6472ba94ba5ce1580a3596f42

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+IJPhbME:PhOm2sI93UufdC67ciJTm5hIE

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      36e1f7e8fcc0e63f33c604d033050130

    • Size

      179KB

    • MD5

      36e1f7e8fcc0e63f33c604d033050130

    • SHA1

      19e4e103c7f68978d2011a4d89ec2fae6f6b909f

    • SHA256

      280cc8b23c75622e2ca7f0116ecf071c92397b1ba3670de6fa17d4dd5f1f728e

    • SHA512

      2b9260b3cc813614cf07410219e35c97b726f700c6f01ef436f958b3b59824a644b434790fa49c9bb85f4b59ca7dcc5a71932cb6472ba94ba5ce1580a3596f42

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+IJPhbME:PhOm2sI93UufdC67ciJTm5hIE

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks