Overview

overview

10

Static

static

3

2b2b8aadc0...01.exe

windows7-x64

10

2b2b8aadc0...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b2b8aadc0f3ed7ee1b1672a21fdba7433933e5f74477db7fad5d5e530058601

  • Size

    72KB

  • Sample

    240523-yj12cseb42

  • MD5

    1ec126ded0e91b66f135f1f16882edba

  • SHA1

    d1c5ceb67ba742b476c53ba486540aec9a84249e

  • SHA256

    2b2b8aadc0f3ed7ee1b1672a21fdba7433933e5f74477db7fad5d5e530058601

  • SHA512

    9b03fb7e980efd9a110b3c3af67e42cf870eea84cbd2701e8136e52163ee408f8be11a191b05f3515a6a17df62ef0a0a1b5e2feb782b98a6b4060fee51ead702

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKwWv:ymb3NkkiQ3mdBjFIjeK8

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      2b2b8aadc0f3ed7ee1b1672a21fdba7433933e5f74477db7fad5d5e530058601

    • Size

      72KB

    • MD5

      1ec126ded0e91b66f135f1f16882edba

    • SHA1

      d1c5ceb67ba742b476c53ba486540aec9a84249e

    • SHA256

      2b2b8aadc0f3ed7ee1b1672a21fdba7433933e5f74477db7fad5d5e530058601

    • SHA512

      9b03fb7e980efd9a110b3c3af67e42cf870eea84cbd2701e8136e52163ee408f8be11a191b05f3515a6a17df62ef0a0a1b5e2feb782b98a6b4060fee51ead702

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKwWv:ymb3NkkiQ3mdBjFIjeK8

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks