Overview

overview

10

Static

static

3

fb80e35282...2d.exe

windows7-x64

10

fb80e35282...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d

  • Size

    277KB

  • Sample

    240524-gcsyqsfc95

  • MD5

    45d305a22c0b0bcd6400096d779e5e08

  • SHA1

    cf868088e7c5650fdb74e95bd89484f5b96098f8

  • SHA256

    fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d

  • SHA512

    e270fc1a1f847590514acb452a127578900ed56e496b406ab9dec8c18749455707483268ea786a6da47d552d53f7a7ff3da6c4c00016b2e7c30a81d75b77ea7b

  • SSDEEP

    6144:n3C9BRIG0asYFm71m8+GdkB9yMu7VvemV3:n3C9uYA71kSMu/

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d

    • Size

      277KB

    • MD5

      45d305a22c0b0bcd6400096d779e5e08

    • SHA1

      cf868088e7c5650fdb74e95bd89484f5b96098f8

    • SHA256

      fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d

    • SHA512

      e270fc1a1f847590514acb452a127578900ed56e496b406ab9dec8c18749455707483268ea786a6da47d552d53f7a7ff3da6c4c00016b2e7c30a81d75b77ea7b

    • SSDEEP

      6144:n3C9BRIG0asYFm71m8+GdkB9yMu7VvemV3:n3C9uYA71kSMu/

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks