Overview

overview

10

Static

static

3

60769ef80e...4b.exe

windows7-x64

10

60769ef80e...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60769ef80ed3561395e20a8a323753a7dddfc1652a2ba38f5ef8baac0113aa4b

  • Size

    56KB

  • Sample

    240605-3jk3cscg69

  • MD5

    e6e289d7da43b219357e6b84f76f2502

  • SHA1

    a48dab30d929ccb20c41dfe7ae4b11d984c0d51e

  • SHA256

    60769ef80ed3561395e20a8a323753a7dddfc1652a2ba38f5ef8baac0113aa4b

  • SHA512

    5d1b458484d321a4d70d26a3358c336079c2748bfe08b7dd90189025a379724b81ee1695c0f26cd7cb8c881bd15ee86224b96bfcc35944d2df70d9e52e717625

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chV/5:ymb3NkkiQ3mdBjF0crR

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      60769ef80ed3561395e20a8a323753a7dddfc1652a2ba38f5ef8baac0113aa4b

    • Size

      56KB

    • MD5

      e6e289d7da43b219357e6b84f76f2502

    • SHA1

      a48dab30d929ccb20c41dfe7ae4b11d984c0d51e

    • SHA256

      60769ef80ed3561395e20a8a323753a7dddfc1652a2ba38f5ef8baac0113aa4b

    • SHA512

      5d1b458484d321a4d70d26a3358c336079c2748bfe08b7dd90189025a379724b81ee1695c0f26cd7cb8c881bd15ee86224b96bfcc35944d2df70d9e52e717625

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chV/5:ymb3NkkiQ3mdBjF0crR

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks