Overview

overview

10

Static

static

3

2fe3de2352...54.exe

windows7-x64

10

2fe3de2352...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fe3de2352dfefb9525becb358bde79165f0e61bca8e7dec3be789ec0b1abd54

  • Size

    115KB

  • Sample

    240519-yyxbqafg6y

  • MD5

    2217c376d2c06994d8a6e6249e13dac4

  • SHA1

    1a88ad31d018021073cb20e54913bdc238eafa3c

  • SHA256

    2fe3de2352dfefb9525becb358bde79165f0e61bca8e7dec3be789ec0b1abd54

  • SHA512

    087136b2dabb879c5a1d1395cc630c1253c385efbc18ba5354922de2c939bc9ecc3f388c31bca7dbbc4fdac13586ad967564c4af5277d6da6aacba0ec37e8dfb

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFosxXGPXbXQMFHLgDWSmjlkFb:n3C9BRosxW8MFHLMWvl6

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      2fe3de2352dfefb9525becb358bde79165f0e61bca8e7dec3be789ec0b1abd54

    • Size

      115KB

    • MD5

      2217c376d2c06994d8a6e6249e13dac4

    • SHA1

      1a88ad31d018021073cb20e54913bdc238eafa3c

    • SHA256

      2fe3de2352dfefb9525becb358bde79165f0e61bca8e7dec3be789ec0b1abd54

    • SHA512

      087136b2dabb879c5a1d1395cc630c1253c385efbc18ba5354922de2c939bc9ecc3f388c31bca7dbbc4fdac13586ad967564c4af5277d6da6aacba0ec37e8dfb

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFosxXGPXbXQMFHLgDWSmjlkFb:n3C9BRosxW8MFHLMWvl6

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks