Overview

overview

10

Static

static

3

61c781b01d...2a.exe

windows7-x64

10

61c781b01d...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61c781b01dc729ca062cfa5fe0e94c8c9dcdf705ce618fe03bff74116df1582a.exe

  • Size

    65KB

  • Sample

    240519-mj6q3aec9w

  • MD5

    d0f12b7854af3212c3613488cd969290

  • SHA1

    c46e686a426eeaef004261cc37bc1a0438f15afc

  • SHA256

    61c781b01dc729ca062cfa5fe0e94c8c9dcdf705ce618fe03bff74116df1582a

  • SHA512

    7e4f5b03ad7d3ffcf2c8a024e9c67aa3bf5b46ce5c8d78ae43b21d5f6d7f142c74e78b1901a61f472f61241f7b115c9085f33d6c220bd1aebb6968e6b6c6cecf

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3AyXmcx:ymb3NkkiQ3mdBjFI46TQyXmcx

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      61c781b01dc729ca062cfa5fe0e94c8c9dcdf705ce618fe03bff74116df1582a.exe

    • Size

      65KB

    • MD5

      d0f12b7854af3212c3613488cd969290

    • SHA1

      c46e686a426eeaef004261cc37bc1a0438f15afc

    • SHA256

      61c781b01dc729ca062cfa5fe0e94c8c9dcdf705ce618fe03bff74116df1582a

    • SHA512

      7e4f5b03ad7d3ffcf2c8a024e9c67aa3bf5b46ce5c8d78ae43b21d5f6d7f142c74e78b1901a61f472f61241f7b115c9085f33d6c220bd1aebb6968e6b6c6cecf

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3AyXmcx:ymb3NkkiQ3mdBjFI46TQyXmcx

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks