Overview

overview

10

Static

static

3

abd35364d3...09.exe

windows7-x64

10

abd35364d3...09.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abd35364d342750bfcd6f9b9522723c94dffe088fa5ac48a7d469030d62c6109

  • Size

    73KB

  • Sample

    240525-cd1bzsaf6s

  • MD5

    1cc97735b4ce3a0152cd4f12224df765

  • SHA1

    a2f83b798fc7a58c42371fee7151753a11a8befb

  • SHA256

    abd35364d342750bfcd6f9b9522723c94dffe088fa5ac48a7d469030d62c6109

  • SHA512

    1ea66915c0daa299229da5f09f64b8ace53f36d5fa18ef4f2be788169ceb52fa2e583dad948d0f2039a1698f7a4ddab4a8865365ea569236694ce0202c5ac31a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbKQPV790v:ymb3NkkiQ3mdBjFIfvTfCD+HlQgv

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      abd35364d342750bfcd6f9b9522723c94dffe088fa5ac48a7d469030d62c6109

    • Size

      73KB

    • MD5

      1cc97735b4ce3a0152cd4f12224df765

    • SHA1

      a2f83b798fc7a58c42371fee7151753a11a8befb

    • SHA256

      abd35364d342750bfcd6f9b9522723c94dffe088fa5ac48a7d469030d62c6109

    • SHA512

      1ea66915c0daa299229da5f09f64b8ace53f36d5fa18ef4f2be788169ceb52fa2e583dad948d0f2039a1698f7a4ddab4a8865365ea569236694ce0202c5ac31a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbKQPV790v:ymb3NkkiQ3mdBjFIfvTfCD+HlQgv

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks