Overview

overview

10

Static

static

3

23acc44179...1c.exe

windows7-x64

10

23acc44179...1c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23acc4417910610065119f24ad54e5b9bcd024f8629922bbd1df64c9c036f81c

  • Size

    128KB

  • Sample

    240518-yb993acd42

  • MD5

    b70a203afbc921759dcc4b771a79afcf

  • SHA1

    e29447e64e46a939cb8de133449322fe9406121e

  • SHA256

    23acc4417910610065119f24ad54e5b9bcd024f8629922bbd1df64c9c036f81c

  • SHA512

    f9e91ac5e9a41c30d9aa5b2499c9f7e6b55b3768ba64325f76655155b1567a1af1f02e13d1bba7e79fc26de7cb323986ad6ed64e453de12b540f33476765c5cd

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afoHvmQ+EZMYX/x6gtc:n3C9BRW0j/uVEZFJvm

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      23acc4417910610065119f24ad54e5b9bcd024f8629922bbd1df64c9c036f81c

    • Size

      128KB

    • MD5

      b70a203afbc921759dcc4b771a79afcf

    • SHA1

      e29447e64e46a939cb8de133449322fe9406121e

    • SHA256

      23acc4417910610065119f24ad54e5b9bcd024f8629922bbd1df64c9c036f81c

    • SHA512

      f9e91ac5e9a41c30d9aa5b2499c9f7e6b55b3768ba64325f76655155b1567a1af1f02e13d1bba7e79fc26de7cb323986ad6ed64e453de12b540f33476765c5cd

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afoHvmQ+EZMYX/x6gtc:n3C9BRW0j/uVEZFJvm

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks