Overview

overview

10

Static

static

10

747b80deca...a7.exe

windows7-x64

10

747b80deca...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    747b80deca45767fa87c99276663c4463063c8a77b79b029ce32e40a6306cca7

  • Size

    334KB

  • Sample

    240519-3bc2sagf4y

  • MD5

    574856122a15d14c8e093700944bb541

  • SHA1

    552f154f05b7d11d7fb474c5b9a8dfd4a4a25699

  • SHA256

    747b80deca45767fa87c99276663c4463063c8a77b79b029ce32e40a6306cca7

  • SHA512

    159a9813a684b1195a68e81c1cd45c582105a8cc0ed61dfbb6b94462c8feba81339b8f5624dda02869e33afa4c68b689f016d25972c36819b14e466cce016f07

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/0:x4wFHoS3eFaKHpv/VycgE8o0

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      747b80deca45767fa87c99276663c4463063c8a77b79b029ce32e40a6306cca7

    • Size

      334KB

    • MD5

      574856122a15d14c8e093700944bb541

    • SHA1

      552f154f05b7d11d7fb474c5b9a8dfd4a4a25699

    • SHA256

      747b80deca45767fa87c99276663c4463063c8a77b79b029ce32e40a6306cca7

    • SHA512

      159a9813a684b1195a68e81c1cd45c582105a8cc0ed61dfbb6b94462c8feba81339b8f5624dda02869e33afa4c68b689f016d25972c36819b14e466cce016f07

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/0:x4wFHoS3eFaKHpv/VycgE8o0

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks