blackmoon | ad2ae892b8103ea806909fb081da19f550608d4532262ab8483d82188be44efa | Triage

Submit
Reports

Overview

overview

Static

static

7

f6cb328c29...18.exe

windows7-x64

f6cb328c29...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

f6cb328c29a8ff51703630785b77d243_JaffaCakes118
Size

12.7MB
Sample

240417-3bzwjshd56
MD5

f6cb328c29a8ff51703630785b77d243
SHA1

cfe058f409ab6caf92c24346271eb81baf7ca633
SHA256

ad2ae892b8103ea806909fb081da19f550608d4532262ab8483d82188be44efa
SHA512

e3e85a8a6f4cd497a882e558a4b1c8232784054d040c59bfdc67ef2056f236b3a84a7f5cca1b73afefca0b559dee1046dcc0e0e05ecfda9f0b21c605ac9b2b16
SSDEEP

393216:7sbS7wPxvF27jUxjw9Yxj34n38kAxUlpPFI6/:a2HUx89YxU38kM+PFIm

Score

10^/10

blackmoon banker evasion trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f6cb328c29a8ff51703630785b77d243_JaffaCakes118.exe

Resource

win7-20231129-en

blackmoon banker evasion trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

f6cb328c29a8ff51703630785b77d243_JaffaCakes118.exe

Resource

win10v2004-20240412-en

blackmoon banker evasion trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  f6cb328c29a8ff51703630785b77d243_JaffaCakes118
- Size
  
  12.7MB
- MD5
  
  f6cb328c29a8ff51703630785b77d243
- SHA1
  
  cfe058f409ab6caf92c24346271eb81baf7ca633
- SHA256
  
  ad2ae892b8103ea806909fb081da19f550608d4532262ab8483d82188be44efa
- SHA512
  
  e3e85a8a6f4cd497a882e558a4b1c8232784054d040c59bfdc67ef2056f236b3a84a7f5cca1b73afefca0b559dee1046dcc0e0e05ecfda9f0b21c605ac9b2b16
- SSDEEP
  
  393216:7sbS7wPxvF27jUxjw9Yxj34n38kAxUlpPFI6/:a2HUx89YxU38kM+PFIm
Score

10^/10

blackmoon banker evasion trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerevasiontrojanupx

behavioral2

blackmoonbankerevasiontrojanupx

© 2018-2025

Terms | Privacy