Overview

overview

10

Static

static

10

8da3614190...32.exe

windows7-x64

10

8da3614190...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8da3614190d8656d2aacfb4c023d9c8e24b61dd7ba9c6be1aa35106dfd42f732

  • Size

    81KB

  • Sample

    240521-bfhdhsda86

  • MD5

    3cd6fdc301e4da055be41ab900eb9c98

  • SHA1

    fd4e480bce5c2e25151df327237451816b0c4b19

  • SHA256

    8da3614190d8656d2aacfb4c023d9c8e24b61dd7ba9c6be1aa35106dfd42f732

  • SHA512

    bb7bb75b338fc30c913d0eab4f6c01e3257b5e5be809ff83d5f30e3cf0095ec3268a17b61d4cfc6637e761ee3a1e2dd8323f7b3ab99f3fc6a1760787ebbf9dbf

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6T73:zhOmTsF93UYfwC6GIoutiTU2HVS633

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8da3614190d8656d2aacfb4c023d9c8e24b61dd7ba9c6be1aa35106dfd42f732

    • Size

      81KB

    • MD5

      3cd6fdc301e4da055be41ab900eb9c98

    • SHA1

      fd4e480bce5c2e25151df327237451816b0c4b19

    • SHA256

      8da3614190d8656d2aacfb4c023d9c8e24b61dd7ba9c6be1aa35106dfd42f732

    • SHA512

      bb7bb75b338fc30c913d0eab4f6c01e3257b5e5be809ff83d5f30e3cf0095ec3268a17b61d4cfc6637e761ee3a1e2dd8323f7b3ab99f3fc6a1760787ebbf9dbf

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6T73:zhOmTsF93UYfwC6GIoutiTU2HVS633

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks