Overview

overview

10

Static

static

10

4a2e547f30...4a.exe

windows7-x64

10

4a2e547f30...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a2e547f300b5ddaa8937f6d60ceebc3a43352bc2321d9e45e23f0aa71ea204a

  • Size

    175KB

  • Sample

    240518-zx3b1sfe7y

  • MD5

    3832882bfecd7bb0af6e4c6aa3b0f5be

  • SHA1

    bfacd1ae279e9a105b179737a8915ebe506211ef

  • SHA256

    4a2e547f300b5ddaa8937f6d60ceebc3a43352bc2321d9e45e23f0aa71ea204a

  • SHA512

    d185795e6c0ac6d7b3dc9cee928885d3adb8db7150e0e0ccfaae72762630e8afc3a00606d69bde0476c0f3109d934711b6308e67f9b6b2a03bcc8cf5856019b6

  • SSDEEP

    3072:fhOmTsF93UYfwC6GIoutXGvBZrQlmUzpi8rY9AABa1YRMxlHCM2fDz:fcm4FmowdHoSXGZEBzddWhROiM2/

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      4a2e547f300b5ddaa8937f6d60ceebc3a43352bc2321d9e45e23f0aa71ea204a

    • Size

      175KB

    • MD5

      3832882bfecd7bb0af6e4c6aa3b0f5be

    • SHA1

      bfacd1ae279e9a105b179737a8915ebe506211ef

    • SHA256

      4a2e547f300b5ddaa8937f6d60ceebc3a43352bc2321d9e45e23f0aa71ea204a

    • SHA512

      d185795e6c0ac6d7b3dc9cee928885d3adb8db7150e0e0ccfaae72762630e8afc3a00606d69bde0476c0f3109d934711b6308e67f9b6b2a03bcc8cf5856019b6

    • SSDEEP

      3072:fhOmTsF93UYfwC6GIoutXGvBZrQlmUzpi8rY9AABa1YRMxlHCM2fDz:fcm4FmowdHoSXGZEBzddWhROiM2/

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks