Overview

overview

10

Static

static

10

4ba99f71de...05.exe

windows7-x64

10

4ba99f71de...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ba99f71de23800aecb47eef266c933567254705400196ddecb1c71fe5ba8d05

  • Size

    339KB

  • Sample

    240519-z85araaf25

  • MD5

    384f0d916d80ab539b63216f4365bda8

  • SHA1

    f7b8cdd01013fd4b18e789d352c25411e151e01b

  • SHA256

    4ba99f71de23800aecb47eef266c933567254705400196ddecb1c71fe5ba8d05

  • SHA512

    e2603d73ebbb3b9d356bb30c0000f3abe458e3a2e2f0a955057c1a694fd9038518fcf07dc64608e1405c290f8c6d1a45ff42e86b1182b48bffd4afbea9c49de3

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNis:9cm4FmowdHoS4BtguSPKyHs

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      4ba99f71de23800aecb47eef266c933567254705400196ddecb1c71fe5ba8d05

    • Size

      339KB

    • MD5

      384f0d916d80ab539b63216f4365bda8

    • SHA1

      f7b8cdd01013fd4b18e789d352c25411e151e01b

    • SHA256

      4ba99f71de23800aecb47eef266c933567254705400196ddecb1c71fe5ba8d05

    • SHA512

      e2603d73ebbb3b9d356bb30c0000f3abe458e3a2e2f0a955057c1a694fd9038518fcf07dc64608e1405c290f8c6d1a45ff42e86b1182b48bffd4afbea9c49de3

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNis:9cm4FmowdHoS4BtguSPKyHs

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks