Overview

overview

10

Static

static

3

0d1b94afcc...1f.exe

windows7-x64

10

0d1b94afcc...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d1b94afcca445412f4f12eb7fa4635fe674aab7b5080dc43e96835923760b1f

  • Size

    382KB

  • Sample

    240524-xcrcxafa7s

  • MD5

    8e841499ab16f5a328227712355e31af

  • SHA1

    843b0b7bb9a7f680f9569fdeff1986f16fcd0f9e

  • SHA256

    0d1b94afcca445412f4f12eb7fa4635fe674aab7b5080dc43e96835923760b1f

  • SHA512

    da00c51e9519fca2743ef5897ed612ef005eb6f583a2e8b5b56c26d145cfee1d13faf1dcb2c34a9ecdd54e87fa4593ef0bd6a39279c9ba00176b36137a5a3086

  • SSDEEP

    6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwg:n3C9uYA7okVqdKwaO5CVF

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0d1b94afcca445412f4f12eb7fa4635fe674aab7b5080dc43e96835923760b1f

    • Size

      382KB

    • MD5

      8e841499ab16f5a328227712355e31af

    • SHA1

      843b0b7bb9a7f680f9569fdeff1986f16fcd0f9e

    • SHA256

      0d1b94afcca445412f4f12eb7fa4635fe674aab7b5080dc43e96835923760b1f

    • SHA512

      da00c51e9519fca2743ef5897ed612ef005eb6f583a2e8b5b56c26d145cfee1d13faf1dcb2c34a9ecdd54e87fa4593ef0bd6a39279c9ba00176b36137a5a3086

    • SSDEEP

      6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwg:n3C9uYA7okVqdKwaO5CVF

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks