Overview

overview

10

Static

static

3

e2dd3dc297...60.exe

windows7-x64

10

e2dd3dc297...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2dd3dc2978a6422e078c635a12221079e9543103e100181dc0a02e462106f60

  • Size

    95KB

  • Sample

    240521-ft1jgaaf4z

  • MD5

    a0d5ea24940313c9e42274e5acbeb6e9

  • SHA1

    d324e9ca040d9f42ff3d10adea00d5583c9e65a5

  • SHA256

    e2dd3dc2978a6422e078c635a12221079e9543103e100181dc0a02e462106f60

  • SHA512

    d9e2fe67d4a0fb36dd76c3350bb6fe1796f4ebbfbfe64e3304f8c6d9bea66acdb33a3cc4e4032f5ce41085163132703b1acf158f9a64aaa83e85d4e5c062ba70

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/2CH:ymb3NkkiQ3mdBjFo73PYP1lri3K8GwyG

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e2dd3dc2978a6422e078c635a12221079e9543103e100181dc0a02e462106f60

    • Size

      95KB

    • MD5

      a0d5ea24940313c9e42274e5acbeb6e9

    • SHA1

      d324e9ca040d9f42ff3d10adea00d5583c9e65a5

    • SHA256

      e2dd3dc2978a6422e078c635a12221079e9543103e100181dc0a02e462106f60

    • SHA512

      d9e2fe67d4a0fb36dd76c3350bb6fe1796f4ebbfbfe64e3304f8c6d9bea66acdb33a3cc4e4032f5ce41085163132703b1acf158f9a64aaa83e85d4e5c062ba70

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/2CH:ymb3NkkiQ3mdBjFo73PYP1lri3K8GwyG

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks