Overview

overview

10

Static

static

3

e6bffaa7cc...0c.exe

windows7-x64

10

e6bffaa7cc...0c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6bffaa7ccd3608b1d9be2abc5a1e93014ffdb2ff3813f32a31cae0d4f04a00c

  • Size

    54KB

  • Sample

    240520-elj13sbd5t

  • MD5

    146f4a09c337b78018ade4454f945b6a

  • SHA1

    add45c93ab846e456d5509ab78ae8069dde93365

  • SHA256

    e6bffaa7ccd3608b1d9be2abc5a1e93014ffdb2ff3813f32a31cae0d4f04a00c

  • SHA512

    78aa9a45e575ca6557f136a093e5384cfcd907a7d885af4afec4dc385096aa04fa66f044995e1482d7ce5d1ac25f107fa271ddc366204237d25d4bea0ab56c7a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFt:ymb3NkkiQ3mdBjFIFt

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e6bffaa7ccd3608b1d9be2abc5a1e93014ffdb2ff3813f32a31cae0d4f04a00c

    • Size

      54KB

    • MD5

      146f4a09c337b78018ade4454f945b6a

    • SHA1

      add45c93ab846e456d5509ab78ae8069dde93365

    • SHA256

      e6bffaa7ccd3608b1d9be2abc5a1e93014ffdb2ff3813f32a31cae0d4f04a00c

    • SHA512

      78aa9a45e575ca6557f136a093e5384cfcd907a7d885af4afec4dc385096aa04fa66f044995e1482d7ce5d1ac25f107fa271ddc366204237d25d4bea0ab56c7a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFt:ymb3NkkiQ3mdBjFIFt

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks