Overview

overview

10

Static

static

3

8bc691dd97...10.exe

windows7-x64

10

8bc691dd97...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bc691dd97f7637eb80a59458f218ce53c1b4407ebbb669b2cd3c608afa6b710

  • Size

    111KB

  • Sample

    240518-3p4rnaeg97

  • MD5

    03d5f6b0156c4dad3e28a03e28df53f4

  • SHA1

    39478dcba20a9bdf85a664d5753021b8bfd53627

  • SHA256

    8bc691dd97f7637eb80a59458f218ce53c1b4407ebbb669b2cd3c608afa6b710

  • SHA512

    1fcff56d9f0af94beb93bb76a7b3d16e3ff2d136920e4db1e736a2e523ded9bc5d8da88b5ca8172927d17981e1130a5c5187c8b2dca67990841d85a7f82f204d

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afowpDyJo1ZFt:n3C9BRW0j/wtyJ0

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8bc691dd97f7637eb80a59458f218ce53c1b4407ebbb669b2cd3c608afa6b710

    • Size

      111KB

    • MD5

      03d5f6b0156c4dad3e28a03e28df53f4

    • SHA1

      39478dcba20a9bdf85a664d5753021b8bfd53627

    • SHA256

      8bc691dd97f7637eb80a59458f218ce53c1b4407ebbb669b2cd3c608afa6b710

    • SHA512

      1fcff56d9f0af94beb93bb76a7b3d16e3ff2d136920e4db1e736a2e523ded9bc5d8da88b5ca8172927d17981e1130a5c5187c8b2dca67990841d85a7f82f204d

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afowpDyJo1ZFt:n3C9BRW0j/wtyJ0

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks