Overview

overview

10

Static

static

3

56296b04cf...AS.exe

windows7-x64

10

56296b04cf...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56296b04cf8c07fdb58053bbc0fc73f0_NEAS

  • Size

    193KB

  • Sample

    240507-dh1zraab83

  • MD5

    56296b04cf8c07fdb58053bbc0fc73f0

  • SHA1

    99b04a5c697aed80594c0a9bcf03078f1a27f9ca

  • SHA256

    96bb8fdf903fb894e8a92900b17c60b60ac3bc7837fc3544f595b670d44dc2da

  • SHA512

    37eb21f9be49d7e6f73fd7cb617112e379c3bc9148b161beed672072f2a650e591c569b7a7b03f0291c74696d5788c42f4d3984a65aa1499f608a37d99c96c0a

  • SSDEEP

    1536:VvQBeOGtrYSSsrc93UBIfdC67m6AJiqHlHdmAW2:VhOm2sI93UufdC67ciVAW2

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      56296b04cf8c07fdb58053bbc0fc73f0_NEAS

    • Size

      193KB

    • MD5

      56296b04cf8c07fdb58053bbc0fc73f0

    • SHA1

      99b04a5c697aed80594c0a9bcf03078f1a27f9ca

    • SHA256

      96bb8fdf903fb894e8a92900b17c60b60ac3bc7837fc3544f595b670d44dc2da

    • SHA512

      37eb21f9be49d7e6f73fd7cb617112e379c3bc9148b161beed672072f2a650e591c569b7a7b03f0291c74696d5788c42f4d3984a65aa1499f608a37d99c96c0a

    • SSDEEP

      1536:VvQBeOGtrYSSsrc93UBIfdC67m6AJiqHlHdmAW2:VhOm2sI93UufdC67ciVAW2

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks