Overview

overview

10

Static

static

10

a5cd8159bd...68.exe

windows7-x64

10

a5cd8159bd...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468

  • Size

    363KB

  • Sample

    240521-cp76zafb4x

  • MD5

    ad4f6b9ace9998795638cb8b347249f8

  • SHA1

    6a847e8f4fe7d25a78e3281a5669154190775d9c

  • SHA256

    a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468

  • SHA512

    aa9b9a9b2cf468c0bd8e7b87c1b21871e4b0a78bc31fbdf1b0a950cd731554d9c737dfb4f4398e1cb7e6b3f90b912ca639624d8834102cf17f013389726f7558

  • SSDEEP

    6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE81:/4wFHoSQuxy3rTXIM181

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468

    • Size

      363KB

    • MD5

      ad4f6b9ace9998795638cb8b347249f8

    • SHA1

      6a847e8f4fe7d25a78e3281a5669154190775d9c

    • SHA256

      a5cd8159bd049e1717fea530136cbb8ab8eae8bb6358bd281e448cb21e41d468

    • SHA512

      aa9b9a9b2cf468c0bd8e7b87c1b21871e4b0a78bc31fbdf1b0a950cd731554d9c737dfb4f4398e1cb7e6b3f90b912ca639624d8834102cf17f013389726f7558

    • SSDEEP

      6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE81:/4wFHoSQuxy3rTXIM181

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks