Overview

overview

10

Static

static

3

5cb0ff9666...6d.exe

windows7-x64

10

5cb0ff9666...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cb0ff9666b7087b5e6af56380b3bf3a6bafcc30e189606d78c239b41fb7426d

  • Size

    343KB

  • Sample

    240519-1z9pjsce8v

  • MD5

    42de68d7ed5158f478e6be8a204c788d

  • SHA1

    8f3171951ce337d48b9c960ee72c8012e5b2aace

  • SHA256

    5cb0ff9666b7087b5e6af56380b3bf3a6bafcc30e189606d78c239b41fb7426d

  • SHA512

    710f70357126a510596aa5d1fcd1391ca37aa8703c9581109253788081ffb9edc6bf2c99385e3ce19f4a04920ac743b73804daa9a6bd4d821796c9f9c620cb31

  • SSDEEP

    6144:n3C9BRo/AIX2MUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFhXjmnwJQyID:n3C9uDnUXoSWlnwJv90aKToFqwfIB1

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5cb0ff9666b7087b5e6af56380b3bf3a6bafcc30e189606d78c239b41fb7426d

    • Size

      343KB

    • MD5

      42de68d7ed5158f478e6be8a204c788d

    • SHA1

      8f3171951ce337d48b9c960ee72c8012e5b2aace

    • SHA256

      5cb0ff9666b7087b5e6af56380b3bf3a6bafcc30e189606d78c239b41fb7426d

    • SHA512

      710f70357126a510596aa5d1fcd1391ca37aa8703c9581109253788081ffb9edc6bf2c99385e3ce19f4a04920ac743b73804daa9a6bd4d821796c9f9c620cb31

    • SSDEEP

      6144:n3C9BRo/AIX2MUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFhXjmnwJQyID:n3C9uDnUXoSWlnwJv90aKToFqwfIB1

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks