Overview

overview

10

Static

static

3

257428a29c...38.exe

windows7-x64

10

257428a29c...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    257428a29c3b312604b62051e432044223f422ae0695e268d570d0efd5fdac38

  • Size

    119KB

  • Sample

    240518-ydb52sca6x

  • MD5

    3b423353faf891b80d47cfccf689b5a8

  • SHA1

    7ccaf62476e83aa5c8f06a4c5502fc1e0d4824e2

  • SHA256

    257428a29c3b312604b62051e432044223f422ae0695e268d570d0efd5fdac38

  • SHA512

    2beed17d80deb1246a02e171f9f361bf9bee86a01312d69be84f6619aca3e9fd20e321cc21ceb6999b2d5224543d56051399d602d158585b300ee5c43fada96f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDomRGApSuLAR2yPBCQ1nDFu1Q8sV:ymb3NkkiQ3mdBjFomR7UsyJC+n0GsgcA

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      257428a29c3b312604b62051e432044223f422ae0695e268d570d0efd5fdac38

    • Size

      119KB

    • MD5

      3b423353faf891b80d47cfccf689b5a8

    • SHA1

      7ccaf62476e83aa5c8f06a4c5502fc1e0d4824e2

    • SHA256

      257428a29c3b312604b62051e432044223f422ae0695e268d570d0efd5fdac38

    • SHA512

      2beed17d80deb1246a02e171f9f361bf9bee86a01312d69be84f6619aca3e9fd20e321cc21ceb6999b2d5224543d56051399d602d158585b300ee5c43fada96f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDomRGApSuLAR2yPBCQ1nDFu1Q8sV:ymb3NkkiQ3mdBjFomR7UsyJC+n0GsgcA

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks