Overview

overview

10

Static

static

3

d747e03faa...d0.exe

windows7-x64

10

d747e03faa...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d747e03faae9aa603f371c8d4e47c5ccab0f224cbbd26492d4efac38679674d0

  • Size

    520KB

  • Sample

    240520-dtzwtshc25

  • MD5

    64b2a759b143bf2ee94f7e775c124343

  • SHA1

    4cda5bc5ad33bc4d3de37c50feeb548b10595193

  • SHA256

    d747e03faae9aa603f371c8d4e47c5ccab0f224cbbd26492d4efac38679674d0

  • SHA512

    11f84ce398ed458f30bc770a7f5d2ba5b1f5794503ee602c40bc11bbc6b79a1cb24ad8863353ead4700043e30f51e033d5e9d03cdd49afcdbbd27da09f25d6b0

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3n:q7Tc2NYHUrAwfMHNnpls4893

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d747e03faae9aa603f371c8d4e47c5ccab0f224cbbd26492d4efac38679674d0

    • Size

      520KB

    • MD5

      64b2a759b143bf2ee94f7e775c124343

    • SHA1

      4cda5bc5ad33bc4d3de37c50feeb548b10595193

    • SHA256

      d747e03faae9aa603f371c8d4e47c5ccab0f224cbbd26492d4efac38679674d0

    • SHA512

      11f84ce398ed458f30bc770a7f5d2ba5b1f5794503ee602c40bc11bbc6b79a1cb24ad8863353ead4700043e30f51e033d5e9d03cdd49afcdbbd27da09f25d6b0

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3n:q7Tc2NYHUrAwfMHNnpls4893

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks