Overview

overview

10

Static

static

3

9894176478...df.exe

windows7-x64

10

9894176478...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9894176478519b1422c4bcd0c58303f6c48fdbea75e18e1c64573dac677713df.exe

  • Size

    335KB

  • Sample

    240523-2c1nssbc48

  • MD5

    1b7b12a27f2de8044daa30e4bc6f3130

  • SHA1

    5436998649239ead552f7dc9250c9f1d5a75734e

  • SHA256

    9894176478519b1422c4bcd0c58303f6c48fdbea75e18e1c64573dac677713df

  • SHA512

    ddd1dac50c37da2c378f93eece2987fb999602af627adec88371606798af0d95448761ebd181632353a034457cd40de2ac24ebf5d5b10120fa23146932625994

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHqnuOeHzmB600TUA6Z7zupc+BM:n3C9BRo7tvnJ99T/KZEuOod00TG+BM

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9894176478519b1422c4bcd0c58303f6c48fdbea75e18e1c64573dac677713df.exe

    • Size

      335KB

    • MD5

      1b7b12a27f2de8044daa30e4bc6f3130

    • SHA1

      5436998649239ead552f7dc9250c9f1d5a75734e

    • SHA256

      9894176478519b1422c4bcd0c58303f6c48fdbea75e18e1c64573dac677713df

    • SHA512

      ddd1dac50c37da2c378f93eece2987fb999602af627adec88371606798af0d95448761ebd181632353a034457cd40de2ac24ebf5d5b10120fa23146932625994

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHqnuOeHzmB600TUA6Z7zupc+BM:n3C9BRo7tvnJ99T/KZEuOod00TG+BM

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks