Overview

overview

10

Static

static

3

216afb510e...15.exe

windows7-x64

10

216afb510e...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    216afb510e3aad4e9b8b5935534ad628195549cd8a9777d9a888bdc20fa82515

  • Size

    70KB

  • Sample

    240520-yw6glsfg6t

  • MD5

    4c2713169fd9688aed5c1c9e80b6ecd2

  • SHA1

    a36f1cee992c67f51b1d876fe0af7d763cd4b0df

  • SHA256

    216afb510e3aad4e9b8b5935534ad628195549cd8a9777d9a888bdc20fa82515

  • SHA512

    efdaadb0564e2dc5ac6e4a62cf46de8b6b4b995df410ccbb38bc72fd5cd2c2c963bbde3d2a851ad9bd48c664515ab57f5b4d5194495455b119eb2405e3cb1c72

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73tgyYrc:ymb3NkkiQ3mdBjFo73thY4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      216afb510e3aad4e9b8b5935534ad628195549cd8a9777d9a888bdc20fa82515

    • Size

      70KB

    • MD5

      4c2713169fd9688aed5c1c9e80b6ecd2

    • SHA1

      a36f1cee992c67f51b1d876fe0af7d763cd4b0df

    • SHA256

      216afb510e3aad4e9b8b5935534ad628195549cd8a9777d9a888bdc20fa82515

    • SHA512

      efdaadb0564e2dc5ac6e4a62cf46de8b6b4b995df410ccbb38bc72fd5cd2c2c963bbde3d2a851ad9bd48c664515ab57f5b4d5194495455b119eb2405e3cb1c72

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73tgyYrc:ymb3NkkiQ3mdBjFo73thY4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks