Overview

overview

10

Static

static

3

cf00bf7ded...9b.exe

windows7-x64

10

cf00bf7ded...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf00bf7ded8a1e34a18867749f85329b

  • Size

    120KB

  • Sample

    240409-3gfpvshh47

  • MD5

    cf00bf7ded8a1e34a18867749f85329b

  • SHA1

    95b4db4480f36eb2b4d76aa6f150667710d3e41e

  • SHA256

    c511a4a16b6c27c8194d5440a99c99339a0541b32c098f6d9fb59632b1cad4f3

  • SHA512

    1548bea4cca4c3407d596a360fe62552214756939e37f6b39f9ae38d66077eab1d734c764602889fa08ae1f2f8740aa5caa2b9341972ca43e4113d01bd174e6f

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LAIRUohDLSULrCimBaH8UH30T+:n3C9BRo/AIuunSppaH8m3F

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cf00bf7ded8a1e34a18867749f85329b

    • Size

      120KB

    • MD5

      cf00bf7ded8a1e34a18867749f85329b

    • SHA1

      95b4db4480f36eb2b4d76aa6f150667710d3e41e

    • SHA256

      c511a4a16b6c27c8194d5440a99c99339a0541b32c098f6d9fb59632b1cad4f3

    • SHA512

      1548bea4cca4c3407d596a360fe62552214756939e37f6b39f9ae38d66077eab1d734c764602889fa08ae1f2f8740aa5caa2b9341972ca43e4113d01bd174e6f

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LAIRUohDLSULrCimBaH8UH30T+:n3C9BRo/AIuunSppaH8m3F

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks