Overview

overview

10

Static

static

7

6d235a8058...d1.exe

windows7-x64

10

6d235a8058...d1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d235a8058076f44172ee9df2f0494d45b24171b0665470191ee2d141d82a8d1

  • Size

    121KB

  • Sample

    240516-b55kcafa92

  • MD5

    744407bbff788ef1ce9ac426183098f0

  • SHA1

    a43bf7e6d9f4df832bb7ec12e06cdc2be9d310a2

  • SHA256

    6d235a8058076f44172ee9df2f0494d45b24171b0665470191ee2d141d82a8d1

  • SHA512

    43cd2a35f85888850ae2d40ae962d562281a7669d9ae87e0edf5a6adfa3a8f4ac29d11b43785247ff04d7be7df5f5f634d820f4f113b1727a5ff35fa32bc4a5c

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+8+dRN14:9cm4FmowdHoSZ6lCXM

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6d235a8058076f44172ee9df2f0494d45b24171b0665470191ee2d141d82a8d1

    • Size

      121KB

    • MD5

      744407bbff788ef1ce9ac426183098f0

    • SHA1

      a43bf7e6d9f4df832bb7ec12e06cdc2be9d310a2

    • SHA256

      6d235a8058076f44172ee9df2f0494d45b24171b0665470191ee2d141d82a8d1

    • SHA512

      43cd2a35f85888850ae2d40ae962d562281a7669d9ae87e0edf5a6adfa3a8f4ac29d11b43785247ff04d7be7df5f5f634d820f4f113b1727a5ff35fa32bc4a5c

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+8+dRN14:9cm4FmowdHoSZ6lCXM

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks