Overview

overview

10

Static

static

3

ae4babbe66...85.exe

windows7-x64

10

ae4babbe66...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae4babbe66f5081127aea1e7a87e9a56c23ba710da4e8337d11931a8811c5a85

  • Size

    467KB

  • Sample

    240409-bjc8zada7v

  • MD5

    29d1091e1bc007f06b700343030652a8

  • SHA1

    36a874f4fbc49739efb6367f8822a2c6e362fb30

  • SHA256

    ae4babbe66f5081127aea1e7a87e9a56c23ba710da4e8337d11931a8811c5a85

  • SHA512

    2ffb1378c8a14463747ad4616feecc813fa9a80de58bfcac8843110d1300b4e3c16ee0953b9e213e4c073b2c9c1b03e0573caab1567c7def581fe3b48f0074af

  • SSDEEP

    12288:57Tc1WjdpKGATTk/6Aihgth7L/QOKs+Q/RIVBjdB/22LX1d:TZpTATrAihgth7L/QOKs+Q/RIVBjdB/7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ae4babbe66f5081127aea1e7a87e9a56c23ba710da4e8337d11931a8811c5a85

    • Size

      467KB

    • MD5

      29d1091e1bc007f06b700343030652a8

    • SHA1

      36a874f4fbc49739efb6367f8822a2c6e362fb30

    • SHA256

      ae4babbe66f5081127aea1e7a87e9a56c23ba710da4e8337d11931a8811c5a85

    • SHA512

      2ffb1378c8a14463747ad4616feecc813fa9a80de58bfcac8843110d1300b4e3c16ee0953b9e213e4c073b2c9c1b03e0573caab1567c7def581fe3b48f0074af

    • SSDEEP

      12288:57Tc1WjdpKGATTk/6Aihgth7L/QOKs+Q/RIVBjdB/22LX1d:TZpTATrAihgth7L/QOKs+Q/RIVBjdB/7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks