Overview

overview

10

Static

static

3

83a6de4b1e...00.exe

windows7-x64

10

83a6de4b1e...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83a6de4b1e0293f01ffb1180a240e61239b11506fe1148751c109c97607f4400

  • Size

    584KB

  • Sample

    240526-aeka2sfe2y

  • MD5

    281dc12bfef01f4adabea495dd3af98a

  • SHA1

    74f8d59320b4a2c6197a42283cdac2b987bca005

  • SHA256

    83a6de4b1e0293f01ffb1180a240e61239b11506fe1148751c109c97607f4400

  • SHA512

    6ef1ed94379e62ef0535bf891f8b0ca4980c34cc9821c3fed9b767d43f0b7a467ecf9e0fc812949b71a62740f2394b09c498ef05f4f5e86854ea05ede2e681ac

  • SSDEEP

    12288:n3C9ytvngQjuPh2kkkkK4kXkkkkkkkkl888888888888888888nusMH0QiZ0:SgdnJKPh2kkkkK4kXkkkkkkkkJ0

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      83a6de4b1e0293f01ffb1180a240e61239b11506fe1148751c109c97607f4400

    • Size

      584KB

    • MD5

      281dc12bfef01f4adabea495dd3af98a

    • SHA1

      74f8d59320b4a2c6197a42283cdac2b987bca005

    • SHA256

      83a6de4b1e0293f01ffb1180a240e61239b11506fe1148751c109c97607f4400

    • SHA512

      6ef1ed94379e62ef0535bf891f8b0ca4980c34cc9821c3fed9b767d43f0b7a467ecf9e0fc812949b71a62740f2394b09c498ef05f4f5e86854ea05ede2e681ac

    • SSDEEP

      12288:n3C9ytvngQjuPh2kkkkK4kXkkkkkkkkl888888888888888888nusMH0QiZ0:SgdnJKPh2kkkkK4kXkkkkkkkkJ0

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks