Overview

overview

10

Static

static

10

558e58ff4a...8f.exe

windows7-x64

10

558e58ff4a...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    558e58ff4a1173129810e7f0bfb0952a80e957eaf2bfa02e32fe71bca03a488f

  • Size

    72KB

  • Sample

    240611-1z8ggstdjh

  • MD5

    4cfb4b358e5881623425e11d4c6a6d55

  • SHA1

    f168f6ada8ddac305487d6732a2eb83b2a88ca28

  • SHA256

    558e58ff4a1173129810e7f0bfb0952a80e957eaf2bfa02e32fe71bca03a488f

  • SHA512

    bfbd8753f25c51608018b1847a18902daed902e351d7a7deff45109c49b14271b17ee30599c496e7a359e29d4c938fb5becdb68766a16ae1e3f201a265f41e82

  • SSDEEP

    1536:NvQBeOGtrYS3srx93UBWfwC6Ggnouy8KlAXmAXIBG/+WIFuTKLXvCB5yAXNlIQki:NhOmTsF93UYfwC6GIoutOP/WWGKL/SYQ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      558e58ff4a1173129810e7f0bfb0952a80e957eaf2bfa02e32fe71bca03a488f

    • Size

      72KB

    • MD5

      4cfb4b358e5881623425e11d4c6a6d55

    • SHA1

      f168f6ada8ddac305487d6732a2eb83b2a88ca28

    • SHA256

      558e58ff4a1173129810e7f0bfb0952a80e957eaf2bfa02e32fe71bca03a488f

    • SHA512

      bfbd8753f25c51608018b1847a18902daed902e351d7a7deff45109c49b14271b17ee30599c496e7a359e29d4c938fb5becdb68766a16ae1e3f201a265f41e82

    • SSDEEP

      1536:NvQBeOGtrYS3srx93UBWfwC6Ggnouy8KlAXmAXIBG/+WIFuTKLXvCB5yAXNlIQki:NhOmTsF93UYfwC6GIoutOP/WWGKL/SYQ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks