Overview

overview

10

Static

static

10

822f6565e3...4a.exe

windows7-x64

10

822f6565e3...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    822f6565e35bdf9f5a3b6fe7b847aa6d5c00dfb616bc9d6cfdf022d306bda74a

  • Size

    231KB

  • Sample

    240424-3vfxsabg8z

  • MD5

    49d7b57c75c6d10595b8258b5cfc7016

  • SHA1

    107cf8a37136e002f796e3b0669cfd9d553877a6

  • SHA256

    822f6565e35bdf9f5a3b6fe7b847aa6d5c00dfb616bc9d6cfdf022d306bda74a

  • SHA512

    66619d7a1e7c76455694cfd79c3bffc13fa9aea08c25d87fb64bbeff42eb75d7729064ef20e5fb2d4ed2cd546366f1ad602915df685b01f199635f758d77c44a

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+M:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+M

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      822f6565e35bdf9f5a3b6fe7b847aa6d5c00dfb616bc9d6cfdf022d306bda74a

    • Size

      231KB

    • MD5

      49d7b57c75c6d10595b8258b5cfc7016

    • SHA1

      107cf8a37136e002f796e3b0669cfd9d553877a6

    • SHA256

      822f6565e35bdf9f5a3b6fe7b847aa6d5c00dfb616bc9d6cfdf022d306bda74a

    • SHA512

      66619d7a1e7c76455694cfd79c3bffc13fa9aea08c25d87fb64bbeff42eb75d7729064ef20e5fb2d4ed2cd546366f1ad602915df685b01f199635f758d77c44a

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+M:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+M

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks