Overview

overview

10

Static

static

3

cbe5db2029...8e.exe

windows7-x64

10

cbe5db2029...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbe5db20299452b1f7bdd6d2d47cc9d119e92fe4462067347223cdb4a27c8f8e.exe

  • Size

    92KB

  • Sample

    240519-qxfnksag4w

  • MD5

    d0f9ed6e4482670221a25ffa25453950

  • SHA1

    5945a9b2a881efc7bc7d991403e86947eb85faf8

  • SHA256

    cbe5db20299452b1f7bdd6d2d47cc9d119e92fe4462067347223cdb4a27c8f8e

  • SHA512

    d56ac2cdfdf72b1f32f2d23cabdfec2c4a034ad74df458feb637b699929eb3af58e7e4b719b4ddc51816a64a129451f3e8cb2ac8eb1a4da05c43c7cc6d4870cd

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/21y:ymb3NkkiQ3mdBjFo73PYP1lri3K8GI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cbe5db20299452b1f7bdd6d2d47cc9d119e92fe4462067347223cdb4a27c8f8e.exe

    • Size

      92KB

    • MD5

      d0f9ed6e4482670221a25ffa25453950

    • SHA1

      5945a9b2a881efc7bc7d991403e86947eb85faf8

    • SHA256

      cbe5db20299452b1f7bdd6d2d47cc9d119e92fe4462067347223cdb4a27c8f8e

    • SHA512

      d56ac2cdfdf72b1f32f2d23cabdfec2c4a034ad74df458feb637b699929eb3af58e7e4b719b4ddc51816a64a129451f3e8cb2ac8eb1a4da05c43c7cc6d4870cd

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/21y:ymb3NkkiQ3mdBjFo73PYP1lri3K8GI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks