Overview

overview

10

Static

static

3

a85e83a777...70.exe

windows7-x64

10

a85e83a777...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a85e83a777d78f446a5722e178315bf180f8f89b1125da95381f7fa0164d3170

  • Size

    59KB

  • Sample

    240519-a823yshg48

  • MD5

    10e4fdd0e182e9707189f739b6547008

  • SHA1

    ef2e9c6c3ab4379565ef2852ed217cf6d317c874

  • SHA256

    a85e83a777d78f446a5722e178315bf180f8f89b1125da95381f7fa0164d3170

  • SHA512

    80373b6da8c64e36acde0bc9dbc5551aebc7d1707fad96cc527e4a072931ed6052da8a92dfa8c4647d8007c1a46220580b3bb001b0f2fae46eb7ec90aa4798fa

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsI:ymb3NkkiQ3mdBjFIsIFI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a85e83a777d78f446a5722e178315bf180f8f89b1125da95381f7fa0164d3170

    • Size

      59KB

    • MD5

      10e4fdd0e182e9707189f739b6547008

    • SHA1

      ef2e9c6c3ab4379565ef2852ed217cf6d317c874

    • SHA256

      a85e83a777d78f446a5722e178315bf180f8f89b1125da95381f7fa0164d3170

    • SHA512

      80373b6da8c64e36acde0bc9dbc5551aebc7d1707fad96cc527e4a072931ed6052da8a92dfa8c4647d8007c1a46220580b3bb001b0f2fae46eb7ec90aa4798fa

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsI:ymb3NkkiQ3mdBjFIsIFI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks