Overview

overview

10

Static

static

3

61f9b9d631...c6.exe

windows7-x64

10

61f9b9d631...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61f9b9d631ddc3c00b88a366ae86b0ca0a0653ddc7db0762375904b69965b2c6

  • Size

    58KB

  • Sample

    240615-16gbkswgqb

  • MD5

    ba3d62827d29eb0595fae2069d722db2

  • SHA1

    b2acbd3b76214ca0f7854bbef640e438cae35e46

  • SHA256

    61f9b9d631ddc3c00b88a366ae86b0ca0a0653ddc7db0762375904b69965b2c6

  • SHA512

    492502f1c38da91fe02046010b60e54339bf2a5e071b789d24f30f3d962fea2c1985ca659bf4d16246f23b6ede53e5518535a468816cc3962ae339722a7a1cbc

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chV/C:ymb3NkkiQ3mdBjF0cra

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      61f9b9d631ddc3c00b88a366ae86b0ca0a0653ddc7db0762375904b69965b2c6

    • Size

      58KB

    • MD5

      ba3d62827d29eb0595fae2069d722db2

    • SHA1

      b2acbd3b76214ca0f7854bbef640e438cae35e46

    • SHA256

      61f9b9d631ddc3c00b88a366ae86b0ca0a0653ddc7db0762375904b69965b2c6

    • SHA512

      492502f1c38da91fe02046010b60e54339bf2a5e071b789d24f30f3d962fea2c1985ca659bf4d16246f23b6ede53e5518535a468816cc3962ae339722a7a1cbc

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0chV/C:ymb3NkkiQ3mdBjF0cra

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks