Overview

overview

10

Static

static

3

9a66e9f188...ac.exe

windows7-x64

10

9a66e9f188...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a66e9f1885c65d72caf77e2b0ff8e411551c044fc17ad02f96d6d61d0d546ac.exe

  • Size

    68KB

  • Sample

    240520-dltpvagg84

  • MD5

    af03f9f013c023e0618ad8102a5e29b0

  • SHA1

    3be4049162ccf7527a78a991b98986dc2416a53e

  • SHA256

    9a66e9f1885c65d72caf77e2b0ff8e411551c044fc17ad02f96d6d61d0d546ac

  • SHA512

    2318c5204b327cdceba91c5ff40dca08b41ba83bc32cf55b3abd3c5e96402e2c7e5929e693e37e06884fbef894604c2fddae7a3d2196ef76183f2a468f8075e6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89+/I:ymb3NkkiQ3mdBjFIvl358nLA89mI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9a66e9f1885c65d72caf77e2b0ff8e411551c044fc17ad02f96d6d61d0d546ac.exe

    • Size

      68KB

    • MD5

      af03f9f013c023e0618ad8102a5e29b0

    • SHA1

      3be4049162ccf7527a78a991b98986dc2416a53e

    • SHA256

      9a66e9f1885c65d72caf77e2b0ff8e411551c044fc17ad02f96d6d61d0d546ac

    • SHA512

      2318c5204b327cdceba91c5ff40dca08b41ba83bc32cf55b3abd3c5e96402e2c7e5929e693e37e06884fbef894604c2fddae7a3d2196ef76183f2a468f8075e6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89+/I:ymb3NkkiQ3mdBjFIvl358nLA89mI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks