Overview

overview

10

Static

static

7

48c1c6bd11...08.exe

windows7-x64

10

48c1c6bd11...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48c1c6bd1184d1dc959ec55f88b899fd82cfe6efbb90865acda3c0195a2cca08.exe

  • Size

    381KB

  • Sample

    240519-mcyf4sdh5s

  • MD5

    0e49a2d51a8015a8302ea26a2516bf30

  • SHA1

    1e85715942427b11e91361e605cad5c8552772a7

  • SHA256

    48c1c6bd1184d1dc959ec55f88b899fd82cfe6efbb90865acda3c0195a2cca08

  • SHA512

    0185bd25e4b330f76a277ecff307af83bf89347f11148cd8ae58b41e3609cf903b3c90c688369588d2203170998fcbf917b894db9bfc514c2b31031bd5d5ea1a

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYTn:y4wFHoS3eFaKHpNKbbswen

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      48c1c6bd1184d1dc959ec55f88b899fd82cfe6efbb90865acda3c0195a2cca08.exe

    • Size

      381KB

    • MD5

      0e49a2d51a8015a8302ea26a2516bf30

    • SHA1

      1e85715942427b11e91361e605cad5c8552772a7

    • SHA256

      48c1c6bd1184d1dc959ec55f88b899fd82cfe6efbb90865acda3c0195a2cca08

    • SHA512

      0185bd25e4b330f76a277ecff307af83bf89347f11148cd8ae58b41e3609cf903b3c90c688369588d2203170998fcbf917b894db9bfc514c2b31031bd5d5ea1a

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYTn:y4wFHoS3eFaKHpNKbbswen

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks