Overview

overview

10

Static

static

3

5fdbde2a83...b6.exe

windows7-x64

10

5fdbde2a83...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fdbde2a835a8a31c2790721dfae68bc3ca64bc567c0416011b8a164d9a278b6

  • Size

    522KB

  • Sample

    240614-1w33laxflg

  • MD5

    e726d3610bc441f0bb751fa8f7cf3835

  • SHA1

    cef849f662c4890a42257bd4342cd2e4cd41b63e

  • SHA256

    5fdbde2a835a8a31c2790721dfae68bc3ca64bc567c0416011b8a164d9a278b6

  • SHA512

    4051910372394012bd2234ba8336eccd5bffcf61404bfdd143d61816fc97a1d8eab0dac25a9907266f23a6f6c55d27c51b0d3c128fa0571b1843664db29177d1

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3x+q:q7Tc2NYHUrAwfMHNnpls4894q

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5fdbde2a835a8a31c2790721dfae68bc3ca64bc567c0416011b8a164d9a278b6

    • Size

      522KB

    • MD5

      e726d3610bc441f0bb751fa8f7cf3835

    • SHA1

      cef849f662c4890a42257bd4342cd2e4cd41b63e

    • SHA256

      5fdbde2a835a8a31c2790721dfae68bc3ca64bc567c0416011b8a164d9a278b6

    • SHA512

      4051910372394012bd2234ba8336eccd5bffcf61404bfdd143d61816fc97a1d8eab0dac25a9907266f23a6f6c55d27c51b0d3c128fa0571b1843664db29177d1

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3x+q:q7Tc2NYHUrAwfMHNnpls4894q

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks