Overview

overview

10

Static

static

3

1cce602a1e...fb.exe

windows7-x64

10

1cce602a1e...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1cce602a1e7837c7f27632b86d28a783ccd4b99b8e0db772250b2bc203c8a0fb

  • Size

    62KB

  • Sample

    240528-xx8gxshf94

  • MD5

    763c67e8613b7335810a1471c35855ed

  • SHA1

    3a8adb6d609a0e311f864a84c9a16c487a03cee4

  • SHA256

    1cce602a1e7837c7f27632b86d28a783ccd4b99b8e0db772250b2bc203c8a0fb

  • SHA512

    a685fb044dcb919d01b1b4bf75721afa6062190edc6c948e5f52ccd7acc88f23bbd5da32d00f526feda8e555b328474817b9aac61f25b4ca4b77e7871afeeefe

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKE0u:ymb3NkkiQ3mdBjFII9ZvHKE0u

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1cce602a1e7837c7f27632b86d28a783ccd4b99b8e0db772250b2bc203c8a0fb

    • Size

      62KB

    • MD5

      763c67e8613b7335810a1471c35855ed

    • SHA1

      3a8adb6d609a0e311f864a84c9a16c487a03cee4

    • SHA256

      1cce602a1e7837c7f27632b86d28a783ccd4b99b8e0db772250b2bc203c8a0fb

    • SHA512

      a685fb044dcb919d01b1b4bf75721afa6062190edc6c948e5f52ccd7acc88f23bbd5da32d00f526feda8e555b328474817b9aac61f25b4ca4b77e7871afeeefe

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKE0u:ymb3NkkiQ3mdBjFII9ZvHKE0u

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks