Overview

overview

10

Static

static

10

Tomcat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Tomcat.bin

  • Size

    1.8MB

  • Sample

    240614-kdb86awdnk

  • MD5

    ed14b710b0bb0b6c2febf42623a22b39

  • SHA1

    f5f78955e0a3087ce68b31c1fefffafc764a9bcf

  • SHA256

    5b1b08a4b4ce88ba1181b53b70f8a03d11726ce18869cc14ff4d7832a6ae0acb

  • SHA512

    fff0463eecba92a2fd52b15e30d95f04042f1c128c5e99b3d4b35e0434fcb9e3d058149c8f2c9553477f36e345771faa42ca8e4fd66d77bfb033d30eeb8e87a0

  • SSDEEP

    49152:egVCCBnU/eDFgaZym4/I07Slp0sUPYu7UPU:T1nUcQI07QpMAH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      Tomcat.bin

    • Size

      1.8MB

    • MD5

      ed14b710b0bb0b6c2febf42623a22b39

    • SHA1

      f5f78955e0a3087ce68b31c1fefffafc764a9bcf

    • SHA256

      5b1b08a4b4ce88ba1181b53b70f8a03d11726ce18869cc14ff4d7832a6ae0acb

    • SHA512

      fff0463eecba92a2fd52b15e30d95f04042f1c128c5e99b3d4b35e0434fcb9e3d058149c8f2c9553477f36e345771faa42ca8e4fd66d77bfb033d30eeb8e87a0

    • SSDEEP

      49152:egVCCBnU/eDFgaZym4/I07Slp0sUPYu7UPU:T1nUcQI07QpMAH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks