Overview

overview

10

Static

static

3

7b030f11b2...a1.exe

windows7-x64

10

7b030f11b2...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b030f11b2a8a47de38f6729d64f1e5469eb1073710f8755802536bec9d618a1

  • Size

    55KB

  • Sample

    240521-agh6rscd5w

  • MD5

    bc7edd346d8b46719aae114c762ec491

  • SHA1

    b79df2a2a2a36b4f57c55161c76957100404d3df

  • SHA256

    7b030f11b2a8a47de38f6729d64f1e5469eb1073710f8755802536bec9d618a1

  • SHA512

    8da91b779951e02862db0fa32b92386a496bd94d8b4a6ac1109f2229f377e9fcc1d956f249b4a75bdff032dc6c68e46c36610cff0788881cb3d939afcf0e3257

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFb:ymb3NkkiQ3mdBjFIFb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7b030f11b2a8a47de38f6729d64f1e5469eb1073710f8755802536bec9d618a1

    • Size

      55KB

    • MD5

      bc7edd346d8b46719aae114c762ec491

    • SHA1

      b79df2a2a2a36b4f57c55161c76957100404d3df

    • SHA256

      7b030f11b2a8a47de38f6729d64f1e5469eb1073710f8755802536bec9d618a1

    • SHA512

      8da91b779951e02862db0fa32b92386a496bd94d8b4a6ac1109f2229f377e9fcc1d956f249b4a75bdff032dc6c68e46c36610cff0788881cb3d939afcf0e3257

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFb:ymb3NkkiQ3mdBjFIFb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks