Overview

overview

10

Static

static

3

cb44ccfea8...14.exe

windows7-x64

10

cb44ccfea8...14.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb44ccfea8028c8f591f3ad17aa4028e2bcf9d27681135e0f621bbce66f81314

  • Size

    13.1MB

  • Sample

    240522-bpf7tafh8y

  • MD5

    d7694bd130b90341b04fb80bc546819c

  • SHA1

    b35fac2dce36f5170ba9e3f15e6ba8bc2cd6e10a

  • SHA256

    cb44ccfea8028c8f591f3ad17aa4028e2bcf9d27681135e0f621bbce66f81314

  • SHA512

    b2002ddbc4dadd08f5bf463d1d4fa9d632ea756c49bbba1ce7a69a4cf19ae2513f5cce31b3db425ffdf44e06a0257c9631aadca1f87303fe14bf177069479705

  • SSDEEP

    393216:tNRCuOIn1IuAk26yg9kfgna3dMfLYqnpfproi:JYInuua6dkfaaGYEpfproi

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cb44ccfea8028c8f591f3ad17aa4028e2bcf9d27681135e0f621bbce66f81314

    • Size

      13.1MB

    • MD5

      d7694bd130b90341b04fb80bc546819c

    • SHA1

      b35fac2dce36f5170ba9e3f15e6ba8bc2cd6e10a

    • SHA256

      cb44ccfea8028c8f591f3ad17aa4028e2bcf9d27681135e0f621bbce66f81314

    • SHA512

      b2002ddbc4dadd08f5bf463d1d4fa9d632ea756c49bbba1ce7a69a4cf19ae2513f5cce31b3db425ffdf44e06a0257c9631aadca1f87303fe14bf177069479705

    • SSDEEP

      393216:tNRCuOIn1IuAk26yg9kfgna3dMfLYqnpfproi:JYInuua6dkfaaGYEpfproi

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks