Overview

overview

10

Static

static

10

44a7423ea8...ef.exe

windows7-x64

10

44a7423ea8...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44a7423ea8029c3e4684fec703cd33f6deedc7d8c812cedd49b49374fa15ebef

  • Size

    479KB

  • Sample

    240418-z47v3sgc41

  • MD5

    d4ae787252701ff23f5d3606bae51a08

  • SHA1

    ea9ec2826d8123e7c5b6385ba5717f86e4ddbd1e

  • SHA256

    44a7423ea8029c3e4684fec703cd33f6deedc7d8c812cedd49b49374fa15ebef

  • SHA512

    6e45ac498c1bad2f30803aba3927a66cdde819909b90b232825d5df9ff28a11a39ebecee36813136e91e727115f80adde9ffea6b00e8f38600a4283a506c425e

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fezw:Su326p0aroZt0sw

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      44a7423ea8029c3e4684fec703cd33f6deedc7d8c812cedd49b49374fa15ebef

    • Size

      479KB

    • MD5

      d4ae787252701ff23f5d3606bae51a08

    • SHA1

      ea9ec2826d8123e7c5b6385ba5717f86e4ddbd1e

    • SHA256

      44a7423ea8029c3e4684fec703cd33f6deedc7d8c812cedd49b49374fa15ebef

    • SHA512

      6e45ac498c1bad2f30803aba3927a66cdde819909b90b232825d5df9ff28a11a39ebecee36813136e91e727115f80adde9ffea6b00e8f38600a4283a506c425e

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fezw:Su326p0aroZt0sw

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks