Overview

overview

10

Static

static

3

59bf29ff2f...f6.exe

windows7-x64

10

59bf29ff2f...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    59bf29ff2f89908ef6ab541c5c8146718e071813d0157ed0a3fc5f7057f17bf6

  • Size

    392KB

  • Sample

    240424-tx7nvadb92

  • MD5

    1003e54cadd81068be45c19d41b734e6

  • SHA1

    c6ab55f0090f70b81e8428a1d7785c224cb7f2ac

  • SHA256

    59bf29ff2f89908ef6ab541c5c8146718e071813d0157ed0a3fc5f7057f17bf6

  • SHA512

    12771b42df8c6e314a64a70ee9b86522653c63b4e1348c721afb388a5a4777faa361b1ab14680139185da92ae80d33ad6455339ac55eea73e9f4dccb8cea5a1d

  • SSDEEP

    6144:Acm7ImGddX5WrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmR+D:m7TcJWjdpKGATTk/jYIOWN/KnnP7D

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      59bf29ff2f89908ef6ab541c5c8146718e071813d0157ed0a3fc5f7057f17bf6

    • Size

      392KB

    • MD5

      1003e54cadd81068be45c19d41b734e6

    • SHA1

      c6ab55f0090f70b81e8428a1d7785c224cb7f2ac

    • SHA256

      59bf29ff2f89908ef6ab541c5c8146718e071813d0157ed0a3fc5f7057f17bf6

    • SHA512

      12771b42df8c6e314a64a70ee9b86522653c63b4e1348c721afb388a5a4777faa361b1ab14680139185da92ae80d33ad6455339ac55eea73e9f4dccb8cea5a1d

    • SSDEEP

      6144:Acm7ImGddX5WrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmR+D:m7TcJWjdpKGATTk/jYIOWN/KnnP7D

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks