Overview

overview

10

Static

static

3

b94572e17b...c5.exe

windows7-x64

10

b94572e17b...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b94572e17b5f93b711d37087eda456ef93c5ca8bbf05ae8d355a09ebbe41f1c5

  • Size

    75KB

  • Sample

    240516-c4at1sgh23

  • MD5

    a78ca02feaf82b30f52efe14c47b5a36

  • SHA1

    c4ca8ff2f4a86a0172e92fac5d31e2ccfeacf6a6

  • SHA256

    b94572e17b5f93b711d37087eda456ef93c5ca8bbf05ae8d355a09ebbe41f1c5

  • SHA512

    e18433f7261fb95541b1086141fff76937c1e2bc058eb3c678e90260ae3211d73d9b8f39545b2382f33cc4500cb8a3b76d9df53a4dd01d8a1ecf7a93d2b94e63

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8gu3Gno9yvrjKT:ymb3NkkiQ3mdBjFo68t3Gno9Ig

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      b94572e17b5f93b711d37087eda456ef93c5ca8bbf05ae8d355a09ebbe41f1c5

    • Size

      75KB

    • MD5

      a78ca02feaf82b30f52efe14c47b5a36

    • SHA1

      c4ca8ff2f4a86a0172e92fac5d31e2ccfeacf6a6

    • SHA256

      b94572e17b5f93b711d37087eda456ef93c5ca8bbf05ae8d355a09ebbe41f1c5

    • SHA512

      e18433f7261fb95541b1086141fff76937c1e2bc058eb3c678e90260ae3211d73d9b8f39545b2382f33cc4500cb8a3b76d9df53a4dd01d8a1ecf7a93d2b94e63

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8gu3Gno9yvrjKT:ymb3NkkiQ3mdBjFo68t3Gno9Ig

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks