Overview

overview

10

Static

static

3

09300385ea...23.exe

windows7-x64

10

09300385ea...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    09300385ea5a7c183081ad79bb043221df2923fed1aeff5cd798f7a5620a5223

  • Size

    109KB

  • Sample

    240509-w3z73agd3w

  • MD5

    153261af84380fb2444818e692c0407f

  • SHA1

    a76dd32080d7a23e005ea79974c7eae9422280a5

  • SHA256

    09300385ea5a7c183081ad79bb043221df2923fed1aeff5cd798f7a5620a5223

  • SHA512

    0863c223ec1d30b60a8caa28b0babf1c35da1529167fbbb0b8baa651a105bd97a2206feb88fb7417ca9e6c04d732ecac3a6d32aca411044ca0e000057ff4e0f0

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9X2OXlw5w4:n3C9BRo7tvnJ9Gh5T

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      09300385ea5a7c183081ad79bb043221df2923fed1aeff5cd798f7a5620a5223

    • Size

      109KB

    • MD5

      153261af84380fb2444818e692c0407f

    • SHA1

      a76dd32080d7a23e005ea79974c7eae9422280a5

    • SHA256

      09300385ea5a7c183081ad79bb043221df2923fed1aeff5cd798f7a5620a5223

    • SHA512

      0863c223ec1d30b60a8caa28b0babf1c35da1529167fbbb0b8baa651a105bd97a2206feb88fb7417ca9e6c04d732ecac3a6d32aca411044ca0e000057ff4e0f0

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9X2OXlw5w4:n3C9BRo7tvnJ9Gh5T

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks