Overview

overview

10

Static

static

3

ee761e5747...8c.exe

windows7-x64

10

ee761e5747...8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee761e574744a22240cc400b366d7d24a2a5e8ad9efbeddaf7b0ce9dd5cf4d8c

  • Size

    212KB

  • Sample

    240521-gdyklsee4w

  • MD5

    c7ca343e49da047bf9d753005c0cd327

  • SHA1

    52c2f0f24f9a44e2c7d96637581b7f4c6291d3a1

  • SHA256

    ee761e574744a22240cc400b366d7d24a2a5e8ad9efbeddaf7b0ce9dd5cf4d8c

  • SHA512

    5b14f1b1c0f7878f540f4dd66c27a57e7d07c6fbb9d6f43e473e3951e46f4bbe0cdcd3e248086a84a5ceaadf15b2061266161ef4866dd525b00866ddce2b9b46

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUmABd1:n3C9BRIG0asYFm71m8+GdkB9EBd1

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ee761e574744a22240cc400b366d7d24a2a5e8ad9efbeddaf7b0ce9dd5cf4d8c

    • Size

      212KB

    • MD5

      c7ca343e49da047bf9d753005c0cd327

    • SHA1

      52c2f0f24f9a44e2c7d96637581b7f4c6291d3a1

    • SHA256

      ee761e574744a22240cc400b366d7d24a2a5e8ad9efbeddaf7b0ce9dd5cf4d8c

    • SHA512

      5b14f1b1c0f7878f540f4dd66c27a57e7d07c6fbb9d6f43e473e3951e46f4bbe0cdcd3e248086a84a5ceaadf15b2061266161ef4866dd525b00866ddce2b9b46

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUmABd1:n3C9BRIG0asYFm71m8+GdkB9EBd1

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks