Overview

overview

10

Static

static

3

49dd87bf9e...b6.exe

windows7-x64

10

49dd87bf9e...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49dd87bf9edc1f76a03a42644bdbe304e308ee5a1c9c0200cfb026d6e0ebf7b6.exe

  • Size

    73KB

  • Sample

    240519-mdkawadh8s

  • MD5

    0a7a399e48a235cfc1ff92e152af1f00

  • SHA1

    b4916d1f22c1cebbca40e8c03f35abb87ecc9360

  • SHA256

    49dd87bf9edc1f76a03a42644bdbe304e308ee5a1c9c0200cfb026d6e0ebf7b6

  • SHA512

    a224947809ce22c4f311db1ef27dce5e93c48d966d99a08b5001a520f99b2b0d18f616937885dff84731ba98737d4a31d46e10658e7df2cc3d00ff240111060e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKeWqNSU:ymb3NkkiQ3mdBjFIjek5x

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      49dd87bf9edc1f76a03a42644bdbe304e308ee5a1c9c0200cfb026d6e0ebf7b6.exe

    • Size

      73KB

    • MD5

      0a7a399e48a235cfc1ff92e152af1f00

    • SHA1

      b4916d1f22c1cebbca40e8c03f35abb87ecc9360

    • SHA256

      49dd87bf9edc1f76a03a42644bdbe304e308ee5a1c9c0200cfb026d6e0ebf7b6

    • SHA512

      a224947809ce22c4f311db1ef27dce5e93c48d966d99a08b5001a520f99b2b0d18f616937885dff84731ba98737d4a31d46e10658e7df2cc3d00ff240111060e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKeWqNSU:ymb3NkkiQ3mdBjFIjek5x

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks