Overview

overview

10

Static

static

3

1a934ff5ae...7b.exe

windows7-x64

10

1a934ff5ae...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a934ff5ae32f61fab0e48d8ac73f0bb7768bb6b8c132a12abb10e181f75497b.exe

  • Size

    141KB

  • Sample

    240522-en6b4abe73

  • MD5

    0611946976553cf8c225475375971e10

  • SHA1

    7724a153c13d01dd1266e54582e5da427cecd85c

  • SHA256

    1a934ff5ae32f61fab0e48d8ac73f0bb7768bb6b8c132a12abb10e181f75497b

  • SHA512

    51de763733b018564d12fa4d820575426f882d131622c4cae8c9b235f2364eabda063a58b32fc94d0df600c2fca2be7fd5f5db503900ee9aeb7f2ae4645f35b4

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmm8mzuFli55p15A/:n3C9BRIG0asYFm71mm8fliG/

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1a934ff5ae32f61fab0e48d8ac73f0bb7768bb6b8c132a12abb10e181f75497b.exe

    • Size

      141KB

    • MD5

      0611946976553cf8c225475375971e10

    • SHA1

      7724a153c13d01dd1266e54582e5da427cecd85c

    • SHA256

      1a934ff5ae32f61fab0e48d8ac73f0bb7768bb6b8c132a12abb10e181f75497b

    • SHA512

      51de763733b018564d12fa4d820575426f882d131622c4cae8c9b235f2364eabda063a58b32fc94d0df600c2fca2be7fd5f5db503900ee9aeb7f2ae4645f35b4

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmm8mzuFli55p15A/:n3C9BRIG0asYFm71mm8fliG/

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks