Overview

overview

10

Static

static

10

754d4bfc3a...42.exe

windows7-x64

10

754d4bfc3a...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    754d4bfc3aa8ae635116dc21a6968e24395663e2d8be2faf99691262b002e342

  • Size

    78KB

  • Sample

    240430-3nk8xsaf61

  • MD5

    51e1e818b3bfd345189bae84325c9146

  • SHA1

    f75fa626d5c649bb78df59a1ea22e68981de4c9c

  • SHA256

    754d4bfc3aa8ae635116dc21a6968e24395663e2d8be2faf99691262b002e342

  • SHA512

    f2c53c0516e9c9eb88150b4edc49e36edc6bc248911714a8e99a2340cc194bb686e1507596b2f1f9a6d1e858223c37beb5912092ec28b06ac857702105defaa8

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TV1:zhOmTsF93UYfwC6GIoutiTU2HVS6D

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      754d4bfc3aa8ae635116dc21a6968e24395663e2d8be2faf99691262b002e342

    • Size

      78KB

    • MD5

      51e1e818b3bfd345189bae84325c9146

    • SHA1

      f75fa626d5c649bb78df59a1ea22e68981de4c9c

    • SHA256

      754d4bfc3aa8ae635116dc21a6968e24395663e2d8be2faf99691262b002e342

    • SHA512

      f2c53c0516e9c9eb88150b4edc49e36edc6bc248911714a8e99a2340cc194bb686e1507596b2f1f9a6d1e858223c37beb5912092ec28b06ac857702105defaa8

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TV1:zhOmTsF93UYfwC6GIoutiTU2HVS6D

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks