Overview

overview

10

Static

static

10

c6c29d6905...48.exe

windows7-x64

10

c6c29d6905...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6c29d69052518203df7159b5762787d5327878ba7bd95c4f69634c739de7948

  • Size

    270KB

  • Sample

    240520-c4eszagd6w

  • MD5

    14da354a3ed514d951db5c12d65cb712

  • SHA1

    50f4eae58ddb0f7dd9a958e84d2caa5e94e767b7

  • SHA256

    c6c29d69052518203df7159b5762787d5327878ba7bd95c4f69634c739de7948

  • SHA512

    6110b9a56ecdb0c2fc6cb596ae3538db2cd4260b91a5381f189f84991ef2542fcf28b3d0f06369e3996d0e2863f956ced782346e059d4ae573dd5eb28ad8cede

  • SSDEEP

    6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmJIh:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPEs

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c6c29d69052518203df7159b5762787d5327878ba7bd95c4f69634c739de7948

    • Size

      270KB

    • MD5

      14da354a3ed514d951db5c12d65cb712

    • SHA1

      50f4eae58ddb0f7dd9a958e84d2caa5e94e767b7

    • SHA256

      c6c29d69052518203df7159b5762787d5327878ba7bd95c4f69634c739de7948

    • SHA512

      6110b9a56ecdb0c2fc6cb596ae3538db2cd4260b91a5381f189f84991ef2542fcf28b3d0f06369e3996d0e2863f956ced782346e059d4ae573dd5eb28ad8cede

    • SSDEEP

      6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmJIh:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPEs

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks