Overview

overview

10

Static

static

3

ba0b664c7a...c6.exe

windows7-x64

10

ba0b664c7a...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba0b664c7a5fd68195a5c14b2538d5138db13aad4f10fdf5d377c9e16a8763c6

  • Size

    78KB

  • Sample

    240521-dwtslagd5x

  • MD5

    76ae4022a66114b15ce7098f337beed5

  • SHA1

    9caadb55cf862fbd95cca9ff2e877301ab30ded3

  • SHA256

    ba0b664c7a5fd68195a5c14b2538d5138db13aad4f10fdf5d377c9e16a8763c6

  • SHA512

    7d327e6b5dd516bebbf73f1515078d76a35395093c523f5567ffcbba1dfe79b696734050c179842fbb163c4deadfc8dab0c990b8fa6d483c70e495271987554d

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wVEJjOBo9l:ymb3NkkiQ3mdBjF+3TU2KEJjE6l

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ba0b664c7a5fd68195a5c14b2538d5138db13aad4f10fdf5d377c9e16a8763c6

    • Size

      78KB

    • MD5

      76ae4022a66114b15ce7098f337beed5

    • SHA1

      9caadb55cf862fbd95cca9ff2e877301ab30ded3

    • SHA256

      ba0b664c7a5fd68195a5c14b2538d5138db13aad4f10fdf5d377c9e16a8763c6

    • SHA512

      7d327e6b5dd516bebbf73f1515078d76a35395093c523f5567ffcbba1dfe79b696734050c179842fbb163c4deadfc8dab0c990b8fa6d483c70e495271987554d

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wVEJjOBo9l:ymb3NkkiQ3mdBjF+3TU2KEJjE6l

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks