Overview

overview

10

Static

static

3

b31e33c4b5...60.exe

windows7-x64

10

b31e33c4b5...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b31e33c4b51b6ef231994dbe1c4d47f6d6b02472b3e3e1eaa0fd43bc72c2d560

  • Size

    78KB

  • Sample

    240519-bx5v5sbd5x

  • MD5

    92ab14f0761b1312821136e6f5e4f203

  • SHA1

    e1fcf75b6e12c30bfcb02f65caf0b8aa85ed90d5

  • SHA256

    b31e33c4b51b6ef231994dbe1c4d47f6d6b02472b3e3e1eaa0fd43bc72c2d560

  • SHA512

    f72eb4949292ca84643579eb968d2b720d528cc8710025d63e922abbcc5321dcb37534a507a82c26860f8e41d3387389b62a34587a5e59fe5c9f187a1b205370

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wVEJjOBoqb:ymb3NkkiQ3mdBjF+3TU2KEJjELb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      b31e33c4b51b6ef231994dbe1c4d47f6d6b02472b3e3e1eaa0fd43bc72c2d560

    • Size

      78KB

    • MD5

      92ab14f0761b1312821136e6f5e4f203

    • SHA1

      e1fcf75b6e12c30bfcb02f65caf0b8aa85ed90d5

    • SHA256

      b31e33c4b51b6ef231994dbe1c4d47f6d6b02472b3e3e1eaa0fd43bc72c2d560

    • SHA512

      f72eb4949292ca84643579eb968d2b720d528cc8710025d63e922abbcc5321dcb37534a507a82c26860f8e41d3387389b62a34587a5e59fe5c9f187a1b205370

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wVEJjOBoqb:ymb3NkkiQ3mdBjF+3TU2KEJjELb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks