Overview

overview

10

Static

static

3

b724a9487f...d2.exe

windows7-x64

10

b724a9487f...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b724a9487f484c3bca8e6db9b3cba7c71231443f9b3abb94bbe3e13069ebbbd2

  • Size

    64KB

  • Sample

    240520-cd2j2seh61

  • MD5

    4cf7bda5012e0ae4c5f193e90246a05c

  • SHA1

    160ba690721cad9e792356287b96ce372bb4503a

  • SHA256

    b724a9487f484c3bca8e6db9b3cba7c71231443f9b3abb94bbe3e13069ebbbd2

  • SHA512

    d6f67a57a5dfcb6ca0a25670461f163d4e417969cad3dbdf469c5c0ae30a4188f18811815ffcd9da0915deaa6bc7f5e8f5a062dcd8c07d27aaa2c7212f6b9ad9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+Luvdh:ymb3NkkiQ3mdBjF0yMlc

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      b724a9487f484c3bca8e6db9b3cba7c71231443f9b3abb94bbe3e13069ebbbd2

    • Size

      64KB

    • MD5

      4cf7bda5012e0ae4c5f193e90246a05c

    • SHA1

      160ba690721cad9e792356287b96ce372bb4503a

    • SHA256

      b724a9487f484c3bca8e6db9b3cba7c71231443f9b3abb94bbe3e13069ebbbd2

    • SHA512

      d6f67a57a5dfcb6ca0a25670461f163d4e417969cad3dbdf469c5c0ae30a4188f18811815ffcd9da0915deaa6bc7f5e8f5a062dcd8c07d27aaa2c7212f6b9ad9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+Luvdh:ymb3NkkiQ3mdBjF0yMlc

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks