Overview

overview

10

Static

static

7

fe70f5f20c...dc.exe

windows7-x64

10

fe70f5f20c...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe70f5f20c9b8e80983e98dc5d91f10fa1f58bb7fe9a26c30a976f77e6208bdc

  • Size

    4.8MB

  • Sample

    240419-nex4ssac69

  • MD5

    cc420d6e9edef355bbe28551535dfc0d

  • SHA1

    f0c831005bd7b459f93afe195badea139d8d0bab

  • SHA256

    fe70f5f20c9b8e80983e98dc5d91f10fa1f58bb7fe9a26c30a976f77e6208bdc

  • SHA512

    83407a2efbbe9e7c870f7c68b2dd8c37c6539b1e5a6ac8ba41ea9ba4b7d6724e580ba79832098a60f798206d273a7b9cc988742502af1d7117a42ca12f2c5925

  • SSDEEP

    98304:BnTQ1u4sWhuZ0j+wFyra4m5Yzy57pG6fTjRjz/gehMN+dzjv4:BnTh4skuZU+Za1H57zp/ghEzjv4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      fe70f5f20c9b8e80983e98dc5d91f10fa1f58bb7fe9a26c30a976f77e6208bdc

    • Size

      4.8MB

    • MD5

      cc420d6e9edef355bbe28551535dfc0d

    • SHA1

      f0c831005bd7b459f93afe195badea139d8d0bab

    • SHA256

      fe70f5f20c9b8e80983e98dc5d91f10fa1f58bb7fe9a26c30a976f77e6208bdc

    • SHA512

      83407a2efbbe9e7c870f7c68b2dd8c37c6539b1e5a6ac8ba41ea9ba4b7d6724e580ba79832098a60f798206d273a7b9cc988742502af1d7117a42ca12f2c5925

    • SSDEEP

      98304:BnTQ1u4sWhuZ0j+wFyra4m5Yzy57pG6fTjRjz/gehMN+dzjv4:BnTh4skuZU+Za1H57zp/ghEzjv4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks