Overview

overview

10

Static

static

3

67fa2c7b7f...25.exe

windows7-x64

10

67fa2c7b7f...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67fa2c7b7f3ce081c159250a936ca8950efd47c8c106fbdc6503bbea2bbaa725

  • Size

    89KB

  • Sample

    240520-3bnhhsbd5x

  • MD5

    99da2233f2a1398d1acb1f791f6e0b06

  • SHA1

    b2c873309f3735919d797e0d8c990190e852fcbe

  • SHA256

    67fa2c7b7f3ce081c159250a936ca8950efd47c8c106fbdc6503bbea2bbaa725

  • SHA512

    380af50e23109b907ec3e7bed1d59bab828a37916c08e08853cce1ac2a9cd9144f5e335656a057695cb2cd1ebd7d2b6071ee0a9c6883a698907d31f50d3a9d34

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73t6MlYqn+jMp9jb+5C/iW:ymb3NkkiQ3mdBjFo73tvn+Yp9jb+5C/F

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      67fa2c7b7f3ce081c159250a936ca8950efd47c8c106fbdc6503bbea2bbaa725

    • Size

      89KB

    • MD5

      99da2233f2a1398d1acb1f791f6e0b06

    • SHA1

      b2c873309f3735919d797e0d8c990190e852fcbe

    • SHA256

      67fa2c7b7f3ce081c159250a936ca8950efd47c8c106fbdc6503bbea2bbaa725

    • SHA512

      380af50e23109b907ec3e7bed1d59bab828a37916c08e08853cce1ac2a9cd9144f5e335656a057695cb2cd1ebd7d2b6071ee0a9c6883a698907d31f50d3a9d34

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73t6MlYqn+jMp9jb+5C/iW:ymb3NkkiQ3mdBjFo73tvn+Yp9jb+5C/F

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks