Overview

overview

10

Static

static

10

2caf7128f3...78.exe

windows7-x64

10

2caf7128f3...78.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2caf7128f3e65a44e74237abbef7d05805d32bf776b032c3f25248eca0278178

  • Size

    298KB

  • Sample

    240428-ygardsfe32

  • MD5

    c53c80b9c606c7d4587cc44e843c5ac0

  • SHA1

    0375b2311924d8c2cb1e34df585de1daa96ba9bc

  • SHA256

    2caf7128f3e65a44e74237abbef7d05805d32bf776b032c3f25248eca0278178

  • SHA512

    6ae713c22fa425af4583f3ecba319afb9eb826bd04d20bacd604f4bdbe419b692068b8e885f99e697b1f6ffefbe3b57f34dba3e1409c04e3237470ceda3425ee

  • SSDEEP

    6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftO+:K4wFHoSQkuUHk1zBR/pMT9XvEhdff

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      2caf7128f3e65a44e74237abbef7d05805d32bf776b032c3f25248eca0278178

    • Size

      298KB

    • MD5

      c53c80b9c606c7d4587cc44e843c5ac0

    • SHA1

      0375b2311924d8c2cb1e34df585de1daa96ba9bc

    • SHA256

      2caf7128f3e65a44e74237abbef7d05805d32bf776b032c3f25248eca0278178

    • SHA512

      6ae713c22fa425af4583f3ecba319afb9eb826bd04d20bacd604f4bdbe419b692068b8e885f99e697b1f6ffefbe3b57f34dba3e1409c04e3237470ceda3425ee

    • SSDEEP

      6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftO+:K4wFHoSQkuUHk1zBR/pMT9XvEhdff

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks