Overview

overview

10

Static

static

3

787ba092f0...62.exe

windows7-x64

10

787ba092f0...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    787ba092f09ad490703adf8b68b10383220a00b520db62d85c7361495ea1e662

  • Size

    214KB

  • Sample

    240522-3cmmlsch8x

  • MD5

    e740e22ee25df2df0304096bf9d60c68

  • SHA1

    98b0f11562051cd507d210511cd07e7e15e628e5

  • SHA256

    787ba092f09ad490703adf8b68b10383220a00b520db62d85c7361495ea1e662

  • SHA512

    cbe637beb31db413591cbc08afc7091a80521a2a5d8707785833e414fe631cfa5fedfb69c4a3b08e885cc54e0f4fd4adadf2b158384e7bddb9a8a8e6fced4f9e

  • SSDEEP

    3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePd:Zcm7ImGddXEu0ucju6/4kf724y

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      787ba092f09ad490703adf8b68b10383220a00b520db62d85c7361495ea1e662

    • Size

      214KB

    • MD5

      e740e22ee25df2df0304096bf9d60c68

    • SHA1

      98b0f11562051cd507d210511cd07e7e15e628e5

    • SHA256

      787ba092f09ad490703adf8b68b10383220a00b520db62d85c7361495ea1e662

    • SHA512

      cbe637beb31db413591cbc08afc7091a80521a2a5d8707785833e414fe631cfa5fedfb69c4a3b08e885cc54e0f4fd4adadf2b158384e7bddb9a8a8e6fced4f9e

    • SSDEEP

      3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePd:Zcm7ImGddXEu0ucju6/4kf724y

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks