Overview

overview

10

Static

static

3

1f6eeaf58c...f5.exe

windows7-x64

10

1f6eeaf58c...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f6eeaf58cce24189277e3287e4b24e84a0bfd73f0950af1a5f6fcf4f106b6f5

  • Size

    54KB

  • Sample

    240524-x68jaagd3z

  • MD5

    4f190b1cbacada5679d99ccc24ec028a

  • SHA1

    5eeae36011ed094d250fcde022475d1a14a296e4

  • SHA256

    1f6eeaf58cce24189277e3287e4b24e84a0bfd73f0950af1a5f6fcf4f106b6f5

  • SHA512

    51db93c2f0c153010bb5c5a231862116d2e9c524a30ff976db053412df5b911cf44a3b7880d8317ef05de40c2a1fa7e43ecb573ebcc57d9b601b3656b712c6f9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFUn:ymb3NkkiQ3mdBjFIFe

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1f6eeaf58cce24189277e3287e4b24e84a0bfd73f0950af1a5f6fcf4f106b6f5

    • Size

      54KB

    • MD5

      4f190b1cbacada5679d99ccc24ec028a

    • SHA1

      5eeae36011ed094d250fcde022475d1a14a296e4

    • SHA256

      1f6eeaf58cce24189277e3287e4b24e84a0bfd73f0950af1a5f6fcf4f106b6f5

    • SHA512

      51db93c2f0c153010bb5c5a231862116d2e9c524a30ff976db053412df5b911cf44a3b7880d8317ef05de40c2a1fa7e43ecb573ebcc57d9b601b3656b712c6f9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFUn:ymb3NkkiQ3mdBjFIFe

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks