Overview

overview

10

Static

static

3

200ef20d0c...b9.exe

windows7-x64

10

200ef20d0c...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    200ef20d0c3e5654c4d985023750a93f87468b557a117a4b4103b9560a1216b9

  • Size

    414KB

  • Sample

    240514-x6tecsda48

  • MD5

    a885633a605c2dd534dbc56098aea933

  • SHA1

    9c350dd20cc1e42ac27e8623b55389ce5cfa885f

  • SHA256

    200ef20d0c3e5654c4d985023750a93f87468b557a117a4b4103b9560a1216b9

  • SHA512

    0a7efa6d9f54dbe2f2f981a8a5a514a6b3ba454f32e200cb07b9d8a56ad35f0cda4d7935b3a93a7281300fe782fc1c9a621c91b57bc63be7d18f9bc5e8d4e064

  • SSDEEP

    12288:n3C9ytvngQj4DtvnV9wLn9UTfC8eieJNBNIsYPH:SgdnJUdnV9n

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      200ef20d0c3e5654c4d985023750a93f87468b557a117a4b4103b9560a1216b9

    • Size

      414KB

    • MD5

      a885633a605c2dd534dbc56098aea933

    • SHA1

      9c350dd20cc1e42ac27e8623b55389ce5cfa885f

    • SHA256

      200ef20d0c3e5654c4d985023750a93f87468b557a117a4b4103b9560a1216b9

    • SHA512

      0a7efa6d9f54dbe2f2f981a8a5a514a6b3ba454f32e200cb07b9d8a56ad35f0cda4d7935b3a93a7281300fe782fc1c9a621c91b57bc63be7d18f9bc5e8d4e064

    • SSDEEP

      12288:n3C9ytvngQj4DtvnV9wLn9UTfC8eieJNBNIsYPH:SgdnJUdnV9n

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks