Overview

overview

10

Static

static

3

b490050625...AS.exe

windows7-x64

10

b490050625...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4900506251569488958ae75f5c5b8f0_NEAS

  • Size

    473KB

  • Sample

    240507-rngpysah3w

  • MD5

    b4900506251569488958ae75f5c5b8f0

  • SHA1

    d6b7606f639c84694c61404651e869610b913168

  • SHA256

    874a2f9ba34e8ea95fe40b0ce02bd795739df11e9134c77f5118fde70620a626

  • SHA512

    4abc0c5a4352d90162460522ef4a47575f9489a93bda0279cfc15ad2c4d1d2065383441297dcdca2a9bb4f15dbd272929e31bbbac0bc17ae051f13d210d00b03

  • SSDEEP

    6144:lcm7ImGddXmNt251UriZFwT+aZKl7pg1xBI:H7Tc2NYHUrAwT+OKLSjI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      b4900506251569488958ae75f5c5b8f0_NEAS

    • Size

      473KB

    • MD5

      b4900506251569488958ae75f5c5b8f0

    • SHA1

      d6b7606f639c84694c61404651e869610b913168

    • SHA256

      874a2f9ba34e8ea95fe40b0ce02bd795739df11e9134c77f5118fde70620a626

    • SHA512

      4abc0c5a4352d90162460522ef4a47575f9489a93bda0279cfc15ad2c4d1d2065383441297dcdca2a9bb4f15dbd272929e31bbbac0bc17ae051f13d210d00b03

    • SSDEEP

      6144:lcm7ImGddXmNt251UriZFwT+aZKl7pg1xBI:H7Tc2NYHUrAwT+OKLSjI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks