Overview

overview

10

Static

static

3

dff9474181...6f.exe

windows7-x64

10

dff9474181...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dff9474181f6d15095f094c2b77a4b8f6c24dcd4f86853ebda8fea2d9c25506f

  • Size

    154KB

  • Sample

    240521-fpfy9sad9x

  • MD5

    108138a06f33ed4bec0a9a0b826d48d1

  • SHA1

    fb9431d9b1af1fe82aa90889b5d6d8bb879c7e02

  • SHA256

    dff9474181f6d15095f094c2b77a4b8f6c24dcd4f86853ebda8fea2d9c25506f

  • SHA512

    6504f2f71015cb8cba7cccf6d7bbe6bf4f8bd7d4c68e288f4ad83bae5ae041ee85538457400ded7cf3a819703ca18e9e91d39cfa189400358021e5e36a0c561d

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmX5k2LrCimBaH8UH303G:n3C9BRIG0asYFm71mJkzpaH8m3t

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      dff9474181f6d15095f094c2b77a4b8f6c24dcd4f86853ebda8fea2d9c25506f

    • Size

      154KB

    • MD5

      108138a06f33ed4bec0a9a0b826d48d1

    • SHA1

      fb9431d9b1af1fe82aa90889b5d6d8bb879c7e02

    • SHA256

      dff9474181f6d15095f094c2b77a4b8f6c24dcd4f86853ebda8fea2d9c25506f

    • SHA512

      6504f2f71015cb8cba7cccf6d7bbe6bf4f8bd7d4c68e288f4ad83bae5ae041ee85538457400ded7cf3a819703ca18e9e91d39cfa189400358021e5e36a0c561d

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmX5k2LrCimBaH8UH303G:n3C9BRIG0asYFm71mJkzpaH8m3t

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks