Overview

overview

10

Static

static

3

1ad60b3ed6...55.exe

windows7-x64

10

1ad60b3ed6...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ad60b3ed65f489b5a55b0bca7a136569aaf87a73893a19bc5f7fc0c5b2c1455

  • Size

    6.6MB

  • Sample

    240524-bmrwjagb34

  • MD5

    1c1a5e10edc5c3f76c8c7b5f930d9cc6

  • SHA1

    431597da16e4a6bc8cce616e4ac329f74d89362a

  • SHA256

    1ad60b3ed65f489b5a55b0bca7a136569aaf87a73893a19bc5f7fc0c5b2c1455

  • SHA512

    abb977cbe57d7645c93a8b6c1d371cc3e106e5343109ada746b7b37c1a9fca6028e005d990d8afa598494ab3cac3cb5f5d6c88b35069faf319293f2c8bb1b959

  • SSDEEP

    98304:/2xVZQxbe0tUhxFVoPVj9mfUFjDNV5cfIxAY46Ned6x5U2+p2e0PWZWhOn+IaXPi:+j6obcVj8Kjxpsd6x5UlpXFZWEnQXPgj

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1ad60b3ed65f489b5a55b0bca7a136569aaf87a73893a19bc5f7fc0c5b2c1455

    • Size

      6.6MB

    • MD5

      1c1a5e10edc5c3f76c8c7b5f930d9cc6

    • SHA1

      431597da16e4a6bc8cce616e4ac329f74d89362a

    • SHA256

      1ad60b3ed65f489b5a55b0bca7a136569aaf87a73893a19bc5f7fc0c5b2c1455

    • SHA512

      abb977cbe57d7645c93a8b6c1d371cc3e106e5343109ada746b7b37c1a9fca6028e005d990d8afa598494ab3cac3cb5f5d6c88b35069faf319293f2c8bb1b959

    • SSDEEP

      98304:/2xVZQxbe0tUhxFVoPVj9mfUFjDNV5cfIxAY46Ned6x5U2+p2e0PWZWhOn+IaXPi:+j6obcVj8Kjxpsd6x5UlpXFZWEnQXPgj

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks