Overview

overview

10

Static

static

3

20dc30072b...76.exe

windows7-x64

10

20dc30072b...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20dc30072bcb167d69ed526367bab5728f1cf9eaf6d0d26e844ca189f9040476.exe

  • Size

    99KB

  • Sample

    240519-l1py7sda99

  • MD5

    a80b3cc634efedb70c4b9d681cdd307a

  • SHA1

    06a7a1d5e51917813cc3dadd261f2ce01d2fefa1

  • SHA256

    20dc30072bcb167d69ed526367bab5728f1cf9eaf6d0d26e844ca189f9040476

  • SHA512

    b2245f4662d258c82ba3867619c97487d7ef8f0517280009362b4f5204e9e6de5a9d7ef35ba8bb975028762217957670bed8d6d3ffcd7ec671406526a4b7dcc2

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHq/4wX:n3C9BRo7tvnJ99T/KZE/7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      20dc30072bcb167d69ed526367bab5728f1cf9eaf6d0d26e844ca189f9040476.exe

    • Size

      99KB

    • MD5

      a80b3cc634efedb70c4b9d681cdd307a

    • SHA1

      06a7a1d5e51917813cc3dadd261f2ce01d2fefa1

    • SHA256

      20dc30072bcb167d69ed526367bab5728f1cf9eaf6d0d26e844ca189f9040476

    • SHA512

      b2245f4662d258c82ba3867619c97487d7ef8f0517280009362b4f5204e9e6de5a9d7ef35ba8bb975028762217957670bed8d6d3ffcd7ec671406526a4b7dcc2

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHq/4wX:n3C9BRo7tvnJ99T/KZE/7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks