Overview

overview

10

Static

static

3

9d7b5fcb44...be.exe

windows7-x64

10

9d7b5fcb44...be.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d7b5fcb440420f95777a8e5654b266600f1e7ec618ea0c012f2bb5c810f4ebe

  • Size

    3.8MB

  • Sample

    240519-md33zsea2s

  • MD5

    ecb2b7f8f24b8b07bebccb3e91bd7f9d

  • SHA1

    cfdac3a8d9fab95f9045a2a17d7c5ae21cc40cd4

  • SHA256

    9d7b5fcb440420f95777a8e5654b266600f1e7ec618ea0c012f2bb5c810f4ebe

  • SHA512

    540e3dfc8b016b868cc31853e7cf2c36b7e0858b5e06ba0ce936d6303e7f3d76e05f28a028f4a7dab808cf4c3b71150768c30ee6a13e1a3babcf0e863166f44a

  • SSDEEP

    98304:X+HVb4W8QPABnSxcmRMpTx5HfywpgURUnKCuGf+bHSbQozYO0UK:X+HJ8NBnSxc+Mp9BfyYeKCdbQozYa

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9d7b5fcb440420f95777a8e5654b266600f1e7ec618ea0c012f2bb5c810f4ebe

    • Size

      3.8MB

    • MD5

      ecb2b7f8f24b8b07bebccb3e91bd7f9d

    • SHA1

      cfdac3a8d9fab95f9045a2a17d7c5ae21cc40cd4

    • SHA256

      9d7b5fcb440420f95777a8e5654b266600f1e7ec618ea0c012f2bb5c810f4ebe

    • SHA512

      540e3dfc8b016b868cc31853e7cf2c36b7e0858b5e06ba0ce936d6303e7f3d76e05f28a028f4a7dab808cf4c3b71150768c30ee6a13e1a3babcf0e863166f44a

    • SSDEEP

      98304:X+HVb4W8QPABnSxcmRMpTx5HfywpgURUnKCuGf+bHSbQozYO0UK:X+HJ8NBnSxc+Mp9BfyYeKCdbQozYa

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks