Overview

overview

10

Static

static

3

be27280b16...0d.exe

windows7-x64

10

be27280b16...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be27280b162b12206c7b17cb17b051c9ee7646d1ba12d2682d5906a39cc8310d

  • Size

    483KB

  • Sample

    240520-cqabbseh79

  • MD5

    2c8314fb140fd81787051fd2ccc37597

  • SHA1

    c0a4b78e6f871113b8e22052d6918ece8372e2dd

  • SHA256

    be27280b162b12206c7b17cb17b051c9ee7646d1ba12d2682d5906a39cc8310d

  • SHA512

    988bf36c9c35a7f39c1957b96e12f239b3654d3e3239e85d1e1bff916025dd81af1f81a5760581d9c761481bda2f6a3d530ca7de9e4bdaf399ae722f32a6f9c7

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjW:q7Tc2NYHUrAwqzco

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      be27280b162b12206c7b17cb17b051c9ee7646d1ba12d2682d5906a39cc8310d

    • Size

      483KB

    • MD5

      2c8314fb140fd81787051fd2ccc37597

    • SHA1

      c0a4b78e6f871113b8e22052d6918ece8372e2dd

    • SHA256

      be27280b162b12206c7b17cb17b051c9ee7646d1ba12d2682d5906a39cc8310d

    • SHA512

      988bf36c9c35a7f39c1957b96e12f239b3654d3e3239e85d1e1bff916025dd81af1f81a5760581d9c761481bda2f6a3d530ca7de9e4bdaf399ae722f32a6f9c7

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjW:q7Tc2NYHUrAwqzco

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks