Overview

overview

10

Static

static

3

5dd2e858da...50.exe

windows7-x64

10

5dd2e858da...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5dd2e858dacb173089f8ab3c5dc3053291218523a511d7197073d8a41b9ade50

  • Size

    149KB

  • Sample

    240524-17k16ada8v

  • MD5

    4ae6325d62432d5cbb8723c7e11d502e

  • SHA1

    a4475115b2390c4fabc07b360b8f157207005af4

  • SHA256

    5dd2e858dacb173089f8ab3c5dc3053291218523a511d7197073d8a41b9ade50

  • SHA512

    c277a8fec956b33e7b8345bc79b3ae146d99764ad10334b9617f07949b64941412a08f2c8e9f52c25fe3d6789de8172dd8fc5511c4e3ba808c8b554df97cdf95

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LAIRUohDmRG08fKkZEU5hkVaqaK6qa50iI:n3C9BRo/AIuuOmfDZEU5OVFiI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5dd2e858dacb173089f8ab3c5dc3053291218523a511d7197073d8a41b9ade50

    • Size

      149KB

    • MD5

      4ae6325d62432d5cbb8723c7e11d502e

    • SHA1

      a4475115b2390c4fabc07b360b8f157207005af4

    • SHA256

      5dd2e858dacb173089f8ab3c5dc3053291218523a511d7197073d8a41b9ade50

    • SHA512

      c277a8fec956b33e7b8345bc79b3ae146d99764ad10334b9617f07949b64941412a08f2c8e9f52c25fe3d6789de8172dd8fc5511c4e3ba808c8b554df97cdf95

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LAIRUohDmRG08fKkZEU5hkVaqaK6qa50iI:n3C9BRo/AIuuOmfDZEU5OVFiI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks