Overview

overview

10

Static

static

3

79d1ad1e13...95.exe

windows7-x64

10

79d1ad1e13...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79d1ad1e13b02cb0b73c8a9b074d9a71bfc554f7725f3ebc4585d1a02d408895

  • Size

    75KB

  • Sample

    240518-2yfwhsch89

  • MD5

    83dc1a3432d93a59048dbf11ec8bc7ad

  • SHA1

    59730c2f35a7a84fd48764e2df96d3561ca6a6a0

  • SHA256

    79d1ad1e13b02cb0b73c8a9b074d9a71bfc554f7725f3ebc4585d1a02d408895

  • SHA512

    1ed7cf510388a1231b38e55db4124224657fe7663a5af53a5e817ae2c51eeb51cfc66b151fdcbb0a7bce8f4245cb921e818efbceb96c3331ec93202d1d3cf501

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5X:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCp

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      79d1ad1e13b02cb0b73c8a9b074d9a71bfc554f7725f3ebc4585d1a02d408895

    • Size

      75KB

    • MD5

      83dc1a3432d93a59048dbf11ec8bc7ad

    • SHA1

      59730c2f35a7a84fd48764e2df96d3561ca6a6a0

    • SHA256

      79d1ad1e13b02cb0b73c8a9b074d9a71bfc554f7725f3ebc4585d1a02d408895

    • SHA512

      1ed7cf510388a1231b38e55db4124224657fe7663a5af53a5e817ae2c51eeb51cfc66b151fdcbb0a7bce8f4245cb921e818efbceb96c3331ec93202d1d3cf501

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5X:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCp

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks