Overview

overview

10

Static

static

3

73fbe8f01a...45.exe

windows7-x64

10

73fbe8f01a...45.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    73fbe8f01abf009ae3e7b278f610989760f7d87c5b8ddf6887587f97a8de6445

  • Size

    77KB

  • Sample

    240524-3av6zaef5v

  • MD5

    1b3bd8d426377af1df2c64dd7139747b

  • SHA1

    87954ae40414e6182b24bdf81688d3a2a43be5ec

  • SHA256

    73fbe8f01abf009ae3e7b278f610989760f7d87c5b8ddf6887587f97a8de6445

  • SHA512

    cede94198ab2bfd398768358441ff87a53ab916b19c4cbbabfe459c07a44e5ea4483b1e3a26f40160f728a7c96a5dd6814127770398c8aaac46f7085d7209369

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73tgygQwKjiawEmBs:ymb3NkkiQ3mdBjFo73thgQ/wEks

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      73fbe8f01abf009ae3e7b278f610989760f7d87c5b8ddf6887587f97a8de6445

    • Size

      77KB

    • MD5

      1b3bd8d426377af1df2c64dd7139747b

    • SHA1

      87954ae40414e6182b24bdf81688d3a2a43be5ec

    • SHA256

      73fbe8f01abf009ae3e7b278f610989760f7d87c5b8ddf6887587f97a8de6445

    • SHA512

      cede94198ab2bfd398768358441ff87a53ab916b19c4cbbabfe459c07a44e5ea4483b1e3a26f40160f728a7c96a5dd6814127770398c8aaac46f7085d7209369

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73tgygQwKjiawEmBs:ymb3NkkiQ3mdBjFo73thgQ/wEks

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks