Overview

overview

10

Static

static

3

3404a26e31...18.exe

windows7-x64

10

3404a26e31...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3404a26e312b88ec3d70aeb10d74d202967ba67b4464849f62cce847090f7c18

  • Size

    56KB

  • Sample

    240524-y6s92ahh3y

  • MD5

    6070c03e021d62d077a58eabc458bba8

  • SHA1

    f8ddcc4dbaa9da75d3611ed89f11305c34f8f3e7

  • SHA256

    3404a26e312b88ec3d70aeb10d74d202967ba67b4464849f62cce847090f7c18

  • SHA512

    012d832f2b7cfe3387419cf15237dae0ef73d8c7d917d6f2c967b8a31f96c4474c8e5dba7352450ea3e8efc4d4a5e65dcfb8537f5620dfc0fbc4b2c5f82b4c74

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chVn8:ymb3NkkiQ3mdBjF0cr8

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      3404a26e312b88ec3d70aeb10d74d202967ba67b4464849f62cce847090f7c18

    • Size

      56KB

    • MD5

      6070c03e021d62d077a58eabc458bba8

    • SHA1

      f8ddcc4dbaa9da75d3611ed89f11305c34f8f3e7

    • SHA256

      3404a26e312b88ec3d70aeb10d74d202967ba67b4464849f62cce847090f7c18

    • SHA512

      012d832f2b7cfe3387419cf15237dae0ef73d8c7d917d6f2c967b8a31f96c4474c8e5dba7352450ea3e8efc4d4a5e65dcfb8537f5620dfc0fbc4b2c5f82b4c74

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chVn8:ymb3NkkiQ3mdBjF0cr8

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks