Overview

overview

10

Static

static

10

8f73020a1e...db.exe

windows7-x64

10

8f73020a1e...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f73020a1ecbff178c80ac915bb893ce4628e609630a18aa914dc4f26d70afdb

  • Size

    254KB

  • Sample

    240524-atj9laeh33

  • MD5

    a8120f37214d02db03a35f939a71a9f8

  • SHA1

    c69b31b9dd2242dcf2a3f192077874a89e30e94c

  • SHA256

    8f73020a1ecbff178c80ac915bb893ce4628e609630a18aa914dc4f26d70afdb

  • SHA512

    d3c26fb5559d1808ef19ea7cb7b4b43fda86dcbb55b54de388daa1a164325b27b799a286e8838788796ccd5d9776caa3e426ca5967e69a2923bfd26dcdb5cf1a

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfr6:y4wFHoS3eFaKHpKT9XvEhdfr6

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8f73020a1ecbff178c80ac915bb893ce4628e609630a18aa914dc4f26d70afdb

    • Size

      254KB

    • MD5

      a8120f37214d02db03a35f939a71a9f8

    • SHA1

      c69b31b9dd2242dcf2a3f192077874a89e30e94c

    • SHA256

      8f73020a1ecbff178c80ac915bb893ce4628e609630a18aa914dc4f26d70afdb

    • SHA512

      d3c26fb5559d1808ef19ea7cb7b4b43fda86dcbb55b54de388daa1a164325b27b799a286e8838788796ccd5d9776caa3e426ca5967e69a2923bfd26dcdb5cf1a

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfr6:y4wFHoS3eFaKHpKT9XvEhdfr6

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks