Overview

overview

10

Static

static

3

72b522d40a...f1.exe

windows7-x64

10

72b522d40a...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72b522d40a4638c403e9a65dcaf91e616c38af0dfddb81b7898ceec0b39fd7f1

  • Size

    75KB

  • Sample

    240520-3s7bysbd96

  • MD5

    eeb90e1ebe84bc538eed40c60deb3bdd

  • SHA1

    33a226a5235d4efbafde010a17661845723f2125

  • SHA256

    72b522d40a4638c403e9a65dcaf91e616c38af0dfddb81b7898ceec0b39fd7f1

  • SHA512

    d6f4e996c9ad786a6b46fe20b2380c3fde6816fdbae4deff7d0587c7847548ebfd235f266e206576f4a1a883ee9768f9b74967f0ceffa518b914367b82d4d77a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqKA:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqKA

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      72b522d40a4638c403e9a65dcaf91e616c38af0dfddb81b7898ceec0b39fd7f1

    • Size

      75KB

    • MD5

      eeb90e1ebe84bc538eed40c60deb3bdd

    • SHA1

      33a226a5235d4efbafde010a17661845723f2125

    • SHA256

      72b522d40a4638c403e9a65dcaf91e616c38af0dfddb81b7898ceec0b39fd7f1

    • SHA512

      d6f4e996c9ad786a6b46fe20b2380c3fde6816fdbae4deff7d0587c7847548ebfd235f266e206576f4a1a883ee9768f9b74967f0ceffa518b914367b82d4d77a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqKA:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqKA

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks