Overview

overview

10

Static

static

3

299f4a7549...67.exe

windows7-x64

10

299f4a7549...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    299f4a75490f4cfbbc0376ea8addc61464fffdaaf48e710fc888a83bd0e24667

  • Size

    68KB

  • Sample

    240518-yjqwdscd6x

  • MD5

    43031713f64dfcd8507196e9a8f68457

  • SHA1

    040158cefd1b808a02e34e3850e748c181407ab6

  • SHA256

    299f4a75490f4cfbbc0376ea8addc61464fffdaaf48e710fc888a83bd0e24667

  • SHA512

    34ff2bb308c213456438f07049105671ace4339108297de8f9e067c58d41f159f9f1a493a136ab2d77964ad3376bddb61cc3b6a3d1b9e5fd8d3f497bcf3f6769

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89D:ymb3NkkiQ3mdBjFIvl358nLA89D

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      299f4a75490f4cfbbc0376ea8addc61464fffdaaf48e710fc888a83bd0e24667

    • Size

      68KB

    • MD5

      43031713f64dfcd8507196e9a8f68457

    • SHA1

      040158cefd1b808a02e34e3850e748c181407ab6

    • SHA256

      299f4a75490f4cfbbc0376ea8addc61464fffdaaf48e710fc888a83bd0e24667

    • SHA512

      34ff2bb308c213456438f07049105671ace4339108297de8f9e067c58d41f159f9f1a493a136ab2d77964ad3376bddb61cc3b6a3d1b9e5fd8d3f497bcf3f6769

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89D:ymb3NkkiQ3mdBjFIvl358nLA89D

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks