Overview

overview

10

Static

static

10

8424a8353d...d6.exe

windows7-x64

10

8424a8353d...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8424a8353d9b37f9eae15126d7655b83fac03edff9901f1a393e38606d341ed6

  • Size

    107KB

  • Sample

    240523-3y9dhadh9y

  • MD5

    3eabac60a09288a4f8b350bc3a5e60e5

  • SHA1

    097ea75438d0ddb42fc82bc18941b1ee0a213ab0

  • SHA256

    8424a8353d9b37f9eae15126d7655b83fac03edff9901f1a393e38606d341ed6

  • SHA512

    004612a5e788f992f1eedfd376ec01d4626a83bfb654d037519d8a3b6fd88fb5cde67be56cb8e0a961581d2967aded43504636f660eb6ee8c0391899a7db4a5c

  • SSDEEP

    3072:khOmTsF93UYfwC6GIoutpYcvrqrE66krop7Bcgg:kcm4FmowdHoSphraHcp7yv

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8424a8353d9b37f9eae15126d7655b83fac03edff9901f1a393e38606d341ed6

    • Size

      107KB

    • MD5

      3eabac60a09288a4f8b350bc3a5e60e5

    • SHA1

      097ea75438d0ddb42fc82bc18941b1ee0a213ab0

    • SHA256

      8424a8353d9b37f9eae15126d7655b83fac03edff9901f1a393e38606d341ed6

    • SHA512

      004612a5e788f992f1eedfd376ec01d4626a83bfb654d037519d8a3b6fd88fb5cde67be56cb8e0a961581d2967aded43504636f660eb6ee8c0391899a7db4a5c

    • SSDEEP

      3072:khOmTsF93UYfwC6GIoutpYcvrqrE66krop7Bcgg:kcm4FmowdHoSphraHcp7yv

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks