Overview

overview

10

Static

static

3

a6df4553eb...ea.exe

windows7-x64

10

a6df4553eb...ea.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6df4553ebf1901e07e0a790a72b1b5b453b52a30d7170a5194ee4723ead20ea

  • Size

    225KB

  • Sample

    240521-csd3asfb91

  • MD5

    d4fd4153e820c009938f62134742b205

  • SHA1

    727c209c9418e923dd68fe1cbc4e739768946b10

  • SHA256

    a6df4553ebf1901e07e0a790a72b1b5b453b52a30d7170a5194ee4723ead20ea

  • SHA512

    480460683e7492bbf7986fda9f8ce4eecf15e884faf2f5680b5687776cf79abf810a67ef25dcdefa74a4e52629ac18afdb8f1eb05490f77bc054a36904f5376f

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLjBeGz:n3C9BRo7MlrWKo+lxKB

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a6df4553ebf1901e07e0a790a72b1b5b453b52a30d7170a5194ee4723ead20ea

    • Size

      225KB

    • MD5

      d4fd4153e820c009938f62134742b205

    • SHA1

      727c209c9418e923dd68fe1cbc4e739768946b10

    • SHA256

      a6df4553ebf1901e07e0a790a72b1b5b453b52a30d7170a5194ee4723ead20ea

    • SHA512

      480460683e7492bbf7986fda9f8ce4eecf15e884faf2f5680b5687776cf79abf810a67ef25dcdefa74a4e52629ac18afdb8f1eb05490f77bc054a36904f5376f

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLjBeGz:n3C9BRo7MlrWKo+lxKB

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks