Overview

overview

10

Static

static

3

573d95782a...71.exe

windows7-x64

10

573d95782a...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    573d95782a607cb1399717e7f85ab4da2f68d6c92d39b0800bb58cbd8baa1f71

  • Size

    306KB

  • Sample

    240515-161p8afa93

  • MD5

    bd1159fb3d5801ea3d515f74530f2476

  • SHA1

    050023612b58557afcf8b2e8144b5e590e0248ba

  • SHA256

    573d95782a607cb1399717e7f85ab4da2f68d6c92d39b0800bb58cbd8baa1f71

  • SHA512

    1d092af42f9a1ddfe04d11941ddd397bc3b23766ffb81fb739eb43ea1c529472ce05e0c62e70fff46628e196c7f47527980fb720efbd55ecf60a6a950629b8eb

  • SSDEEP

    6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwNZ:n3C9uDVOXLmHBKWyn+PgvuZ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      573d95782a607cb1399717e7f85ab4da2f68d6c92d39b0800bb58cbd8baa1f71

    • Size

      306KB

    • MD5

      bd1159fb3d5801ea3d515f74530f2476

    • SHA1

      050023612b58557afcf8b2e8144b5e590e0248ba

    • SHA256

      573d95782a607cb1399717e7f85ab4da2f68d6c92d39b0800bb58cbd8baa1f71

    • SHA512

      1d092af42f9a1ddfe04d11941ddd397bc3b23766ffb81fb739eb43ea1c529472ce05e0c62e70fff46628e196c7f47527980fb720efbd55ecf60a6a950629b8eb

    • SSDEEP

      6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwNZ:n3C9uDVOXLmHBKWyn+PgvuZ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks