Overview

overview

10

Static

static

3

99fb0fbb49...10.exe

windows7-x64

10

99fb0fbb49...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99fb0fbb49f0f2fa1f665cb59992d1be8adfaae7a71238f59bdebb3ddbb78d10

  • Size

    56KB

  • Sample

    240529-anfdfsbe42

  • MD5

    74a907cb15cd3d113450636803ff5011

  • SHA1

    b06d03f8eb620791b69c9a8f2a663fbe602b13f0

  • SHA256

    99fb0fbb49f0f2fa1f665cb59992d1be8adfaae7a71238f59bdebb3ddbb78d10

  • SHA512

    449b04a93453fa15721f079029fa3eea71219cdb5839e774f3ab93af660a66a3e617c8f550a05f84ae8121dade39caa98115b42f9b935c2fa81980128f768efb

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chVn8:ymb3NkkiQ3mdBjF0cr8

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      99fb0fbb49f0f2fa1f665cb59992d1be8adfaae7a71238f59bdebb3ddbb78d10

    • Size

      56KB

    • MD5

      74a907cb15cd3d113450636803ff5011

    • SHA1

      b06d03f8eb620791b69c9a8f2a663fbe602b13f0

    • SHA256

      99fb0fbb49f0f2fa1f665cb59992d1be8adfaae7a71238f59bdebb3ddbb78d10

    • SHA512

      449b04a93453fa15721f079029fa3eea71219cdb5839e774f3ab93af660a66a3e617c8f550a05f84ae8121dade39caa98115b42f9b935c2fa81980128f768efb

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chVn8:ymb3NkkiQ3mdBjF0cr8

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks