Overview

overview

10

Static

static

3

9d5825cb8b...56.exe

windows7-x64

10

9d5825cb8b...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d5825cb8b4367817c827b3e4ccb61adc57ec29258d7d3905d23b31c00c0a556

  • Size

    408KB

  • Sample

    240604-a4fzxsfb9w

  • MD5

    07631942d45590495311962cad7e3a68

  • SHA1

    dfbe2c6f7808add2d4c4e0ac037afb4c6d80477c

  • SHA256

    9d5825cb8b4367817c827b3e4ccb61adc57ec29258d7d3905d23b31c00c0a556

  • SHA512

    bc880c4726fe07b83b62aa82433776f5292f3ab3e970edb001a2fe4a13d8099134ac06fcfa718346998e3d0b459c6e246fbe98b1118579ff74a765ad43353b06

  • SSDEEP

    3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jJSp1Bwc4:Pcm7ImGddXtWrXD486jJq1Bwc4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9d5825cb8b4367817c827b3e4ccb61adc57ec29258d7d3905d23b31c00c0a556

    • Size

      408KB

    • MD5

      07631942d45590495311962cad7e3a68

    • SHA1

      dfbe2c6f7808add2d4c4e0ac037afb4c6d80477c

    • SHA256

      9d5825cb8b4367817c827b3e4ccb61adc57ec29258d7d3905d23b31c00c0a556

    • SHA512

      bc880c4726fe07b83b62aa82433776f5292f3ab3e970edb001a2fe4a13d8099134ac06fcfa718346998e3d0b459c6e246fbe98b1118579ff74a765ad43353b06

    • SSDEEP

      3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jJSp1Bwc4:Pcm7ImGddXtWrXD486jJq1Bwc4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks