Overview

overview

10

Static

static

3

e2852207c8...92.exe

windows7-x64

10

e2852207c8...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2852207c8a34c404e0b69ddff0ad670730a135cb34466670f9b618cb1561c92

  • Size

    306KB

  • Sample

    240520-edyt9sad24

  • MD5

    693c1aaaef7076cb4e027f766860003a

  • SHA1

    36701e4a89b13e0099ea36679f23b320103edb4c

  • SHA256

    e2852207c8a34c404e0b69ddff0ad670730a135cb34466670f9b618cb1561c92

  • SHA512

    a27356609d2ecaf232afb7a658160bae992f43394209a4b02eccc780f44e40a1cccef547c611263b43575bf79a0cba7739101fd9c351af1a3e61427a07f478a1

  • SSDEEP

    6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vh:n3C9uUnAvtd3Ogld2vh

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e2852207c8a34c404e0b69ddff0ad670730a135cb34466670f9b618cb1561c92

    • Size

      306KB

    • MD5

      693c1aaaef7076cb4e027f766860003a

    • SHA1

      36701e4a89b13e0099ea36679f23b320103edb4c

    • SHA256

      e2852207c8a34c404e0b69ddff0ad670730a135cb34466670f9b618cb1561c92

    • SHA512

      a27356609d2ecaf232afb7a658160bae992f43394209a4b02eccc780f44e40a1cccef547c611263b43575bf79a0cba7739101fd9c351af1a3e61427a07f478a1

    • SSDEEP

      6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vh:n3C9uUnAvtd3Ogld2vh

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks