Overview

overview

10

Static

static

3

7fea9616e6...ca.exe

windows7-x64

10

7fea9616e6...ca.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7fea9616e6fe21c16b2aceb6995943a6a959511654d87b0c2a7aa1debeb293ca

  • Size

    77KB

  • Sample

    240601-3d17dsae4w

  • MD5

    008a73fadce004af8d2c155815fd5d60

  • SHA1

    2f3336e667f4bfd3ed17af3f22556ba19807c5b7

  • SHA256

    7fea9616e6fe21c16b2aceb6995943a6a959511654d87b0c2a7aa1debeb293ca

  • SHA512

    4992beb11da4247d7aba5929046d673c91a5d1ed0ba7588f3a90d5d8264bd4dd12ccc813b336c821329e4e3e6b6e6b948e06128d0246c9c1c3505a38c6806f2e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcPs:ymb3NkkiQ3mdBjFo68YBVIJc9Jtes

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7fea9616e6fe21c16b2aceb6995943a6a959511654d87b0c2a7aa1debeb293ca

    • Size

      77KB

    • MD5

      008a73fadce004af8d2c155815fd5d60

    • SHA1

      2f3336e667f4bfd3ed17af3f22556ba19807c5b7

    • SHA256

      7fea9616e6fe21c16b2aceb6995943a6a959511654d87b0c2a7aa1debeb293ca

    • SHA512

      4992beb11da4247d7aba5929046d673c91a5d1ed0ba7588f3a90d5d8264bd4dd12ccc813b336c821329e4e3e6b6e6b948e06128d0246c9c1c3505a38c6806f2e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcPs:ymb3NkkiQ3mdBjFo68YBVIJc9Jtes

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks