Overview

overview

10

Static

static

10

add6ef9544...c5.exe

windows7-x64

10

add6ef9544...c5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    add6ef9544ebb41ee3c1870feafbd13ae21d945ec3f9072af4740e6d5b6a0ec5

  • Size

    400KB

  • Sample

    240611-b9pppazgjn

  • MD5

    04c9f3eb7f24a015753067e66a27dd61

  • SHA1

    2c802fb9ec8e4a4a730a5de9c610fc7ccc10740d

  • SHA256

    add6ef9544ebb41ee3c1870feafbd13ae21d945ec3f9072af4740e6d5b6a0ec5

  • SHA512

    c65e6c7c3a5a4b1d17b2bbd23553ef391e341637d17b3d6c3c87a92e83709307a56e4be9a32859f23d19cc931e8f8e2f3ff6b23e739e6ce68beeeb63d6bf3ce4

  • SSDEEP

    6144:Lcm4FmowdHoSHt251UriZFwfsDX2CfNnkymTwaJ3o89H3E:R4wFHoSHYHUrAwfMHNnpls4890

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      add6ef9544ebb41ee3c1870feafbd13ae21d945ec3f9072af4740e6d5b6a0ec5

    • Size

      400KB

    • MD5

      04c9f3eb7f24a015753067e66a27dd61

    • SHA1

      2c802fb9ec8e4a4a730a5de9c610fc7ccc10740d

    • SHA256

      add6ef9544ebb41ee3c1870feafbd13ae21d945ec3f9072af4740e6d5b6a0ec5

    • SHA512

      c65e6c7c3a5a4b1d17b2bbd23553ef391e341637d17b3d6c3c87a92e83709307a56e4be9a32859f23d19cc931e8f8e2f3ff6b23e739e6ce68beeeb63d6bf3ce4

    • SSDEEP

      6144:Lcm4FmowdHoSHt251UriZFwfsDX2CfNnkymTwaJ3o89H3E:R4wFHoSHYHUrAwfMHNnpls4890

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks