Overview

overview

10

Static

static

3

9096aaf84c...bb.exe

windows7-x64

10

9096aaf84c...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9096aaf84c75e8704ea15eb2ea4d987e199b54f271b9d7d70db65cf642cd93bb

  • Size

    306KB

  • Sample

    240524-awrrfseh85

  • MD5

    1fe76f02bb16c5a6656a9be5a41e8841

  • SHA1

    8fcee84a834217085312eb419e8010150dae842f

  • SHA256

    9096aaf84c75e8704ea15eb2ea4d987e199b54f271b9d7d70db65cf642cd93bb

  • SHA512

    fb8df427a828e42e00bcb0d64df5070cb722af0395f0e4b0b9162d70326acdabfba2bda1e8fba86773d9da6da9c34143d2701233e421dc6a6c04e205658cd235

  • SSDEEP

    6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwNL:n3C9uDVOXLmHBKWyn+PgvuL

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9096aaf84c75e8704ea15eb2ea4d987e199b54f271b9d7d70db65cf642cd93bb

    • Size

      306KB

    • MD5

      1fe76f02bb16c5a6656a9be5a41e8841

    • SHA1

      8fcee84a834217085312eb419e8010150dae842f

    • SHA256

      9096aaf84c75e8704ea15eb2ea4d987e199b54f271b9d7d70db65cf642cd93bb

    • SHA512

      fb8df427a828e42e00bcb0d64df5070cb722af0395f0e4b0b9162d70326acdabfba2bda1e8fba86773d9da6da9c34143d2701233e421dc6a6c04e205658cd235

    • SSDEEP

      6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwNL:n3C9uDVOXLmHBKWyn+PgvuL

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks