Overview

overview

10

Static

static

3

7e5942d8e1...b8.exe

windows7-x64

10

7e5942d8e1...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e5942d8e13d1fc9c540bcb881d04559855de59f2d39938b5d75afba926042b8

  • Size

    70KB

  • Sample

    240525-3y2nnafb7w

  • MD5

    35617f4c57335cb2a367fc44cfc40109

  • SHA1

    61d2b02f28bd4fc92dab231818e22c081a2eb0bf

  • SHA256

    7e5942d8e13d1fc9c540bcb881d04559855de59f2d39938b5d75afba926042b8

  • SHA512

    2d5b9c8764f6115ed0f46177d406a42380464fddd6020ad78933a507b3c904fa85d5e46138b1322b4fe0b6db2da0366fafff8adae702fa8fc59ec7a0e3f32a90

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgUVyiAnfA:ymb3NkkiQ3mdBjFIgUEBA

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7e5942d8e13d1fc9c540bcb881d04559855de59f2d39938b5d75afba926042b8

    • Size

      70KB

    • MD5

      35617f4c57335cb2a367fc44cfc40109

    • SHA1

      61d2b02f28bd4fc92dab231818e22c081a2eb0bf

    • SHA256

      7e5942d8e13d1fc9c540bcb881d04559855de59f2d39938b5d75afba926042b8

    • SHA512

      2d5b9c8764f6115ed0f46177d406a42380464fddd6020ad78933a507b3c904fa85d5e46138b1322b4fe0b6db2da0366fafff8adae702fa8fc59ec7a0e3f32a90

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgUVyiAnfA:ymb3NkkiQ3mdBjFIgUEBA

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks