Overview

overview

10

Static

static

10

15719b63f9...a0.exe

windows7-x64

10

15719b63f9...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15719b63f9bf3e3249d036e45101f0bf52b808745f54661b72fbb8157c65dca0

  • Size

    456KB

  • Sample

    240524-xp6y5aff3s

  • MD5

    0b3eca5c87d9f54f6573b036a0af4a5a

  • SHA1

    8dd7a52f907cddce7a0912cd4f7b4d66ed4d4b1d

  • SHA256

    15719b63f9bf3e3249d036e45101f0bf52b808745f54661b72fbb8157c65dca0

  • SHA512

    63b21ef3116d80cce8f536aaf4f6b5086e1e29ddada77dd173d702b01cb596f2dcd69bfe3973fb2f5b81cb0a8dc07b23a1f1a00a8a863970d0c8f117b9ec990e

  • SSDEEP

    12288:04wFHoSyd0V3eFp3IDvSbh5nPYERM8mXzplo4M1:rd0gFp3lz1/uzplo9

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      15719b63f9bf3e3249d036e45101f0bf52b808745f54661b72fbb8157c65dca0

    • Size

      456KB

    • MD5

      0b3eca5c87d9f54f6573b036a0af4a5a

    • SHA1

      8dd7a52f907cddce7a0912cd4f7b4d66ed4d4b1d

    • SHA256

      15719b63f9bf3e3249d036e45101f0bf52b808745f54661b72fbb8157c65dca0

    • SHA512

      63b21ef3116d80cce8f536aaf4f6b5086e1e29ddada77dd173d702b01cb596f2dcd69bfe3973fb2f5b81cb0a8dc07b23a1f1a00a8a863970d0c8f117b9ec990e

    • SSDEEP

      12288:04wFHoSyd0V3eFp3IDvSbh5nPYERM8mXzplo4M1:rd0gFp3lz1/uzplo9

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks