Overview

overview

10

Static

static

3

479151bd52...e0.exe

windows7-x64

10

479151bd52...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    479151bd52217edfa921f88bc4bbe5eab153921038568009e05a48a30a9923e0

  • Size

    184KB

  • Sample

    240523-zvbraagd44

  • MD5

    369fec577e99ff5ada1735a40f56861e

  • SHA1

    20f9dac494a42793b5306169d6d020a9da40747e

  • SHA256

    479151bd52217edfa921f88bc4bbe5eab153921038568009e05a48a30a9923e0

  • SHA512

    f4a74bc451c6cd40f517bb1213590b742d6a55dfac054cf67de27f69332cfb2e4d21553e8270b5ab0e3a9449ac44c5596d92e6a3281d1a5c70e4eec43bfe5466

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+EMdbS1Q:PhOm2sI93UufdC67ciJTWMdbJ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      479151bd52217edfa921f88bc4bbe5eab153921038568009e05a48a30a9923e0

    • Size

      184KB

    • MD5

      369fec577e99ff5ada1735a40f56861e

    • SHA1

      20f9dac494a42793b5306169d6d020a9da40747e

    • SHA256

      479151bd52217edfa921f88bc4bbe5eab153921038568009e05a48a30a9923e0

    • SHA512

      f4a74bc451c6cd40f517bb1213590b742d6a55dfac054cf67de27f69332cfb2e4d21553e8270b5ab0e3a9449ac44c5596d92e6a3281d1a5c70e4eec43bfe5466

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+EMdbS1Q:PhOm2sI93UufdC67ciJTWMdbJ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks