Overview

overview

10

Static

static

7

178faed042...97.exe

windows7-x64

10

178faed042...97.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    178faed0426f2808345f36e2bf8713028390563afced7519d215c5737e953197.exe

  • Size

    367KB

  • Sample

    240519-lwq1psch3s

  • MD5

    58e846a947b7640e4c4e91d1ff89aac1

  • SHA1

    51b29439aea7f4d62da0ff3ace531461ff1303e5

  • SHA256

    178faed0426f2808345f36e2bf8713028390563afced7519d215c5737e953197

  • SHA512

    36dd64040ee3c2b2b4b856e840da6021a4f48ee82c66323bbbe0556cdd6c27c5ce4856c1c5494f379c6ac99d6e9b8a79ea6c5eb1aba4b4cbd1ad61351c432caa

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSM/x5R:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      178faed0426f2808345f36e2bf8713028390563afced7519d215c5737e953197.exe

    • Size

      367KB

    • MD5

      58e846a947b7640e4c4e91d1ff89aac1

    • SHA1

      51b29439aea7f4d62da0ff3ace531461ff1303e5

    • SHA256

      178faed0426f2808345f36e2bf8713028390563afced7519d215c5737e953197

    • SHA512

      36dd64040ee3c2b2b4b856e840da6021a4f48ee82c66323bbbe0556cdd6c27c5ce4856c1c5494f379c6ac99d6e9b8a79ea6c5eb1aba4b4cbd1ad61351c432caa

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSM/x5R:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks