Overview

overview

10

Static

static

10

a5cbb2dda5...57.exe

windows7-x64

10

a5cbb2dda5...57.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5cbb2dda57e600efb6df4a87c087e7fc941f5e0560543ce39faca0a8dd14b57

  • Size

    350KB

  • Sample

    240420-bfle6scc53

  • MD5

    217b55223091d6d80bfc8f81fddcaba7

  • SHA1

    2cc93e5688b447827c56965b8ce87ec3e94a850c

  • SHA256

    a5cbb2dda57e600efb6df4a87c087e7fc941f5e0560543ce39faca0a8dd14b57

  • SHA512

    9e90e657b189fa2384d1662acc5d8e0dec8fde55b4b99f34055d170ed6eeb2d0a98259307ca8aee68a22fd557bf7a5ff718cb9a6fd9b75e92dab31bc13e00b1b

  • SSDEEP

    6144:dcm4FmowdHoSNjAszBd+aQz0ZUx2w/ZmTH1R5h2VaHjmVQh5W6z0OJ0HPopxyzum:f4wFHoSN1zBjAGUx2w/q1R5h2VumVQh0

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a5cbb2dda57e600efb6df4a87c087e7fc941f5e0560543ce39faca0a8dd14b57

    • Size

      350KB

    • MD5

      217b55223091d6d80bfc8f81fddcaba7

    • SHA1

      2cc93e5688b447827c56965b8ce87ec3e94a850c

    • SHA256

      a5cbb2dda57e600efb6df4a87c087e7fc941f5e0560543ce39faca0a8dd14b57

    • SHA512

      9e90e657b189fa2384d1662acc5d8e0dec8fde55b4b99f34055d170ed6eeb2d0a98259307ca8aee68a22fd557bf7a5ff718cb9a6fd9b75e92dab31bc13e00b1b

    • SSDEEP

      6144:dcm4FmowdHoSNjAszBd+aQz0ZUx2w/ZmTH1R5h2VaHjmVQh5W6z0OJ0HPopxyzum:f4wFHoSN1zBjAGUx2w/q1R5h2VumVQh0

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks