Overview

overview

10

Static

static

3

05e516a2c1...ae.exe

windows7-x64

10

05e516a2c1...ae.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05e516a2c1556b4aaa21144f9b83de3678a6d78b286d4c17e8b46c1adc82beae

  • Size

    444KB

  • Sample

    240418-w2ly2sce4s

  • MD5

    d4afe2fd52cd55292bca5348a15a7f16

  • SHA1

    9ee4bdd0d8a99827e4ae519a88665abdd5790f60

  • SHA256

    05e516a2c1556b4aaa21144f9b83de3678a6d78b286d4c17e8b46c1adc82beae

  • SHA512

    052629c6da1ff650f5ebe3ec196ad2adab683c7d819ed0097fc79b68d33548d3ff1a7e84bde22ec64a6684a2cdac0186ca141bb59b1be3e0659c04cf4752d851

  • SSDEEP

    6144:n3C9BRo7tvnJ9Fywhk/T4i37K3BoKg0p5WI09JI:n3C9ytvn8whkb4i3e3GFO6JI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      05e516a2c1556b4aaa21144f9b83de3678a6d78b286d4c17e8b46c1adc82beae

    • Size

      444KB

    • MD5

      d4afe2fd52cd55292bca5348a15a7f16

    • SHA1

      9ee4bdd0d8a99827e4ae519a88665abdd5790f60

    • SHA256

      05e516a2c1556b4aaa21144f9b83de3678a6d78b286d4c17e8b46c1adc82beae

    • SHA512

      052629c6da1ff650f5ebe3ec196ad2adab683c7d819ed0097fc79b68d33548d3ff1a7e84bde22ec64a6684a2cdac0186ca141bb59b1be3e0659c04cf4752d851

    • SSDEEP

      6144:n3C9BRo7tvnJ9Fywhk/T4i37K3BoKg0p5WI09JI:n3C9ytvn8whkb4i3e3GFO6JI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks