Overview

overview

10

Static

static

10

efb4da44ef...a3.exe

windows7-x64

10

efb4da44ef...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efb4da44efd6f083271e2b508b10d37819b9cf57e19908f867f68fce3ab6d3a3

  • Size

    82KB

  • Sample

    240524-fq8qnsee47

  • MD5

    c8a780a513ae3f307b849545e668bedb

  • SHA1

    a212e13e412729b694a2c4e5bbffa0c1a193266a

  • SHA256

    efb4da44efd6f083271e2b508b10d37819b9cf57e19908f867f68fce3ab6d3a3

  • SHA512

    d47b8f2e30bd2a021459c6976f54e5e20239c9f0a7c96a756ad218579fa40b95f7d8d8ea2ef3c9aaa5406aef0097acc241dfa6c63e4703a38e45694e67daf9bd

  • SSDEEP

    1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8AelS7/7VIQHo:ChOmTsF93UYfwC6GIoutAe07zVIqo

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      efb4da44efd6f083271e2b508b10d37819b9cf57e19908f867f68fce3ab6d3a3

    • Size

      82KB

    • MD5

      c8a780a513ae3f307b849545e668bedb

    • SHA1

      a212e13e412729b694a2c4e5bbffa0c1a193266a

    • SHA256

      efb4da44efd6f083271e2b508b10d37819b9cf57e19908f867f68fce3ab6d3a3

    • SHA512

      d47b8f2e30bd2a021459c6976f54e5e20239c9f0a7c96a756ad218579fa40b95f7d8d8ea2ef3c9aaa5406aef0097acc241dfa6c63e4703a38e45694e67daf9bd

    • SSDEEP

      1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8AelS7/7VIQHo:ChOmTsF93UYfwC6GIoutAe07zVIqo

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks