Overview

overview

10

Static

static

3

35b3d1c155...23.exe

windows7-x64

10

35b3d1c155...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35b3d1c155a62fe0ec0c7c8e059e6fbef0c01d85d74a95ba80dc937e81b00e23

  • Size

    100KB

  • Sample

    240518-y3wwrade9z

  • MD5

    6fcd5f4f5368df40df9bd2e18bad5422

  • SHA1

    d35b795214e14339a9bd1ff626d5642e3d7acec0

  • SHA256

    35b3d1c155a62fe0ec0c7c8e059e6fbef0c01d85d74a95ba80dc937e81b00e23

  • SHA512

    37464d5af914a1b2bfa80b2d508112778066316dc54a0d21057572e6eb40de78740e04d86a4c6421c34457212e266fc3aec77a53197b7763e1e61e4a97f0348d

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzn6zDaE0R59H:ymb3NkkiQ3mdBjFodt2zE3l

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      35b3d1c155a62fe0ec0c7c8e059e6fbef0c01d85d74a95ba80dc937e81b00e23

    • Size

      100KB

    • MD5

      6fcd5f4f5368df40df9bd2e18bad5422

    • SHA1

      d35b795214e14339a9bd1ff626d5642e3d7acec0

    • SHA256

      35b3d1c155a62fe0ec0c7c8e059e6fbef0c01d85d74a95ba80dc937e81b00e23

    • SHA512

      37464d5af914a1b2bfa80b2d508112778066316dc54a0d21057572e6eb40de78740e04d86a4c6421c34457212e266fc3aec77a53197b7763e1e61e4a97f0348d

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzn6zDaE0R59H:ymb3NkkiQ3mdBjFodt2zE3l

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks