Overview

overview

10

Static

static

3

303d43f1b9...32.exe

windows7-x64

10

303d43f1b9...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    303d43f1b918c48fb6d805b53af0c232e8d42ebbbdff5c8f0703d8e3f982ad32

  • Size

    275KB

  • Sample

    240614-yxme5axgpq

  • MD5

    4bbdf6ef107e8b59f4956cad1cb2bb0a

  • SHA1

    1abf3cfada979129904ab400fcc4a4480a13f51f

  • SHA256

    303d43f1b918c48fb6d805b53af0c232e8d42ebbbdff5c8f0703d8e3f982ad32

  • SHA512

    e616a60403074fd9d2d6f4eb5cde44c37b81896e3520361830654cbdc8564fdab8e3121c558d89b26898f150621f5d1900339ae4eca6b340134167259ce23611

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFfC:8cm7ImGddXmNt251UriZFfC

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      303d43f1b918c48fb6d805b53af0c232e8d42ebbbdff5c8f0703d8e3f982ad32

    • Size

      275KB

    • MD5

      4bbdf6ef107e8b59f4956cad1cb2bb0a

    • SHA1

      1abf3cfada979129904ab400fcc4a4480a13f51f

    • SHA256

      303d43f1b918c48fb6d805b53af0c232e8d42ebbbdff5c8f0703d8e3f982ad32

    • SHA512

      e616a60403074fd9d2d6f4eb5cde44c37b81896e3520361830654cbdc8564fdab8e3121c558d89b26898f150621f5d1900339ae4eca6b340134167259ce23611

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFfC:8cm7ImGddXmNt251UriZFfC

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks