Overview

overview

10

Static

static

3

6fb251acfc...b0.exe

windows7-x64

10

6fb251acfc...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fb251acfc5f3c0e6497ecc8f1dddf4f1fe3a0087cc8511dff83c951866d56b0

  • Size

    77KB

  • Sample

    240518-2hx5vsbe5w

  • MD5

    35a763f99b3f458d87dbfe83aae8b6cb

  • SHA1

    7c8788a08be403bacf3e492cde1c660632c2a801

  • SHA256

    6fb251acfc5f3c0e6497ecc8f1dddf4f1fe3a0087cc8511dff83c951866d56b0

  • SHA512

    7b6be3b482c59154903d5a0a8f7b6671020a9fbbf4c01beccbf8cebd4e3141e9ffc420290f5d289ddbddac6babfb1b12aec67a03f56b6324cc7ab99d3fdd1998

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73tgygQwKjiawEmBg5:ymb3NkkiQ3mdBjFo73thgQ/wEk0

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6fb251acfc5f3c0e6497ecc8f1dddf4f1fe3a0087cc8511dff83c951866d56b0

    • Size

      77KB

    • MD5

      35a763f99b3f458d87dbfe83aae8b6cb

    • SHA1

      7c8788a08be403bacf3e492cde1c660632c2a801

    • SHA256

      6fb251acfc5f3c0e6497ecc8f1dddf4f1fe3a0087cc8511dff83c951866d56b0

    • SHA512

      7b6be3b482c59154903d5a0a8f7b6671020a9fbbf4c01beccbf8cebd4e3141e9ffc420290f5d289ddbddac6babfb1b12aec67a03f56b6324cc7ab99d3fdd1998

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73tgygQwKjiawEmBg5:ymb3NkkiQ3mdBjFo73thgQ/wEk0

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks