Overview

overview

10

Static

static

3

4facae0c37...c0.exe

windows7-x64

10

4facae0c37...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4facae0c37d1bb27e16d9de308e664e4f6d153ae7b1acc61be27f8c2628085c0.exe

  • Size

    335KB

  • Sample

    240522-2ppgasbh2s

  • MD5

    17d2433252f8fa89e2ad3c50505279f0

  • SHA1

    ae769f27d9fd24f181b6d838be69c18ce90735de

  • SHA256

    4facae0c37d1bb27e16d9de308e664e4f6d153ae7b1acc61be27f8c2628085c0

  • SHA512

    84df47ef7dce3134e3e5be5d5fc97f556203b149ada4a58f5291a37d52e2ced8bad7b05910f33e3c1f6cfeb89454ee254e2e4eb32537bc6fa85f7be9598a5c46

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LCgnilBxBqwZK2q6sYTsmZDSFdBE0rXE4efx:n3C9BRo/CEilXBG2qZSlSFdBXExx

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      4facae0c37d1bb27e16d9de308e664e4f6d153ae7b1acc61be27f8c2628085c0.exe

    • Size

      335KB

    • MD5

      17d2433252f8fa89e2ad3c50505279f0

    • SHA1

      ae769f27d9fd24f181b6d838be69c18ce90735de

    • SHA256

      4facae0c37d1bb27e16d9de308e664e4f6d153ae7b1acc61be27f8c2628085c0

    • SHA512

      84df47ef7dce3134e3e5be5d5fc97f556203b149ada4a58f5291a37d52e2ced8bad7b05910f33e3c1f6cfeb89454ee254e2e4eb32537bc6fa85f7be9598a5c46

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LCgnilBxBqwZK2q6sYTsmZDSFdBE0rXE4efx:n3C9BRo/CEilXBG2qZSlSFdBXExx

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks