Overview

overview

10

Static

static

3

89fa360633...61.exe

windows7-x64

10

89fa360633...61.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89fa36063323f00a9699b4ee22f807197d064e7a570554d111e1a598c6474f61

  • Size

    64KB

  • Sample

    240601-ajs4raag4t

  • MD5

    22ad5a19fff59696eb0898c5af4b1ecb

  • SHA1

    c2faa341566ca7894ede2e9f47ac0ccfd32fa255

  • SHA256

    89fa36063323f00a9699b4ee22f807197d064e7a570554d111e1a598c6474f61

  • SHA512

    5122e3862e620ab1c178927ea6b39856469aab7546a0d002fcf47a6e82ea42bf6b803a8c748e41cc9f6a87386ea22cd8669846c28ff5af39e51d21c31d07a33d

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3Ag:ymb3NkkiQ3mdBjFI46TQg

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      89fa36063323f00a9699b4ee22f807197d064e7a570554d111e1a598c6474f61

    • Size

      64KB

    • MD5

      22ad5a19fff59696eb0898c5af4b1ecb

    • SHA1

      c2faa341566ca7894ede2e9f47ac0ccfd32fa255

    • SHA256

      89fa36063323f00a9699b4ee22f807197d064e7a570554d111e1a598c6474f61

    • SHA512

      5122e3862e620ab1c178927ea6b39856469aab7546a0d002fcf47a6e82ea42bf6b803a8c748e41cc9f6a87386ea22cd8669846c28ff5af39e51d21c31d07a33d

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3Ag:ymb3NkkiQ3mdBjFI46TQg

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks