Overview

overview

10

Static

static

10

f96f6a02aa...99.exe

windows7-x64

10

f96f6a02aa...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099

  • Size

    381KB

  • Sample

    240606-knsc5ach85

  • MD5

    1e594285a6c8af80156e094b46df9886

  • SHA1

    96ba9aa37f4e56ac3de392805463e726f664c027

  • SHA256

    f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099

  • SHA512

    47d58e4eb917a97a7fdca75077238969a41bbbda99129f2f4b64cb6bf0c28bbf456ee0022539003481a20af68c6436c1918ad6880bc2681879f33a01044fb2ef

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYTOZ:y4wFHoS3eFaKHpNKbbsweOZ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099

    • Size

      381KB

    • MD5

      1e594285a6c8af80156e094b46df9886

    • SHA1

      96ba9aa37f4e56ac3de392805463e726f664c027

    • SHA256

      f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099

    • SHA512

      47d58e4eb917a97a7fdca75077238969a41bbbda99129f2f4b64cb6bf0c28bbf456ee0022539003481a20af68c6436c1918ad6880bc2681879f33a01044fb2ef

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYTOZ:y4wFHoS3eFaKHpNKbbsweOZ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks