Overview

overview

10

Static

static

3

338310c890...67.exe

windows7-x64

10

338310c890...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    338310c8907a870f6cb703e452680867

  • Size

    179KB

  • Sample

    240409-1zwgxsdf98

  • MD5

    338310c8907a870f6cb703e452680867

  • SHA1

    367c4495c11353e220365d1fd8e753496aee80d6

  • SHA256

    7e89ee6027bbb2c8cc8dbb30096a8bee07675fb077835b9561edb22f8bb11b17

  • SHA512

    2c26fc582d0bd859b81af8b1a3663282f0b6e77b6097016efcd7e5a6beedcb7251b69e024fa9d833bf647d10eef43962ddbe82489c0dda39c6d579ec20ffc02f

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+IJ9OJc3/:PhOm2sI93UufdC67ciJTmm+/

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      338310c8907a870f6cb703e452680867

    • Size

      179KB

    • MD5

      338310c8907a870f6cb703e452680867

    • SHA1

      367c4495c11353e220365d1fd8e753496aee80d6

    • SHA256

      7e89ee6027bbb2c8cc8dbb30096a8bee07675fb077835b9561edb22f8bb11b17

    • SHA512

      2c26fc582d0bd859b81af8b1a3663282f0b6e77b6097016efcd7e5a6beedcb7251b69e024fa9d833bf647d10eef43962ddbe82489c0dda39c6d579ec20ffc02f

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+IJ9OJc3/:PhOm2sI93UufdC67ciJTmm+/

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks