Overview

overview

10

Static

static

3

1b7ea709cb...8e.exe

windows7-x64

10

1b7ea709cb...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b7ea709cbe4a127f9757ff32486f4d1b4198d70e2f8e980f6c317fc0b4a5a8e

  • Size

    306KB

  • Sample

    240523-xt26qsch82

  • MD5

    ca154b3b3b8bfdd413af1b880a72b6b0

  • SHA1

    c3b5ee5201dc7546093adf8f72002e64d039d64f

  • SHA256

    1b7ea709cbe4a127f9757ff32486f4d1b4198d70e2f8e980f6c317fc0b4a5a8e

  • SHA512

    efe6da22648095463113cfed5a7c8bb00c64c92f0f902360bc1d2da1c5fc1faf68fe7e806bdac6515f8d06b39bdb3f5a7f9523bac08a01791f09a68a90480a83

  • SSDEEP

    6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwN4:n3C9uDVOXLmHBKWyn+Pgvu4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1b7ea709cbe4a127f9757ff32486f4d1b4198d70e2f8e980f6c317fc0b4a5a8e

    • Size

      306KB

    • MD5

      ca154b3b3b8bfdd413af1b880a72b6b0

    • SHA1

      c3b5ee5201dc7546093adf8f72002e64d039d64f

    • SHA256

      1b7ea709cbe4a127f9757ff32486f4d1b4198d70e2f8e980f6c317fc0b4a5a8e

    • SHA512

      efe6da22648095463113cfed5a7c8bb00c64c92f0f902360bc1d2da1c5fc1faf68fe7e806bdac6515f8d06b39bdb3f5a7f9523bac08a01791f09a68a90480a83

    • SSDEEP

      6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwN4:n3C9uDVOXLmHBKWyn+Pgvu4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks