Overview

overview

10

Static

static

3

02c6060105...f5.exe

windows7-x64

10

02c6060105...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02c606010594088e2bbfa6aa92d4dd3d715c5d3f64a84686345ed3621a99bbf5

  • Size

    87KB

  • Sample

    240519-wtwtaaba8v

  • MD5

    4b8cb97bf7700fecef23d41adddff91a

  • SHA1

    34b705f1b419edd5431a911a5cf5b94816ef0829

  • SHA256

    02c606010594088e2bbfa6aa92d4dd3d715c5d3f64a84686345ed3621a99bbf5

  • SHA512

    44f08e4e33c87a85233322e98155e65237eed3c428e3e37d715272458af76deea578bc64a6e38eaa7189560d45f27c7bb385c9117b3589c4b9ba41093ba10e73

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3e8:ymb3NkkiQ3mdBjF+3TU2K3bJZXZ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      02c606010594088e2bbfa6aa92d4dd3d715c5d3f64a84686345ed3621a99bbf5

    • Size

      87KB

    • MD5

      4b8cb97bf7700fecef23d41adddff91a

    • SHA1

      34b705f1b419edd5431a911a5cf5b94816ef0829

    • SHA256

      02c606010594088e2bbfa6aa92d4dd3d715c5d3f64a84686345ed3621a99bbf5

    • SHA512

      44f08e4e33c87a85233322e98155e65237eed3c428e3e37d715272458af76deea578bc64a6e38eaa7189560d45f27c7bb385c9117b3589c4b9ba41093ba10e73

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3e8:ymb3NkkiQ3mdBjF+3TU2K3bJZXZ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks