Overview

overview

10

Static

static

3

42a400d86e...6d.exe

windows7-x64

10

42a400d86e...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42a400d86efd084b626d3307888fea321893ffd6b474e63bbd9580ffc9ad0d6d

  • Size

    84KB

  • Sample

    240519-zyp33sab2w

  • MD5

    7df6c56dfcef02522126a6ce5ac98d18

  • SHA1

    69f4990287968e3b683dbb794792ea2686893040

  • SHA256

    42a400d86efd084b626d3307888fea321893ffd6b474e63bbd9580ffc9ad0d6d

  • SHA512

    9a9b179b04923a948300fd78a187a7aa60ac4adc05bd779610e0caae571275a1baf8d41fc44eb6946fdc8d6c8aea57dc05879ca18b8c19a92a876e01feb1540f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJSLCBCO+HlMO7s0yL4f:ymb3NkkiQ3mdBjFIwLMoHW8yL4f

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      42a400d86efd084b626d3307888fea321893ffd6b474e63bbd9580ffc9ad0d6d

    • Size

      84KB

    • MD5

      7df6c56dfcef02522126a6ce5ac98d18

    • SHA1

      69f4990287968e3b683dbb794792ea2686893040

    • SHA256

      42a400d86efd084b626d3307888fea321893ffd6b474e63bbd9580ffc9ad0d6d

    • SHA512

      9a9b179b04923a948300fd78a187a7aa60ac4adc05bd779610e0caae571275a1baf8d41fc44eb6946fdc8d6c8aea57dc05879ca18b8c19a92a876e01feb1540f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJSLCBCO+HlMO7s0yL4f:ymb3NkkiQ3mdBjFIwLMoHW8yL4f

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks