Overview

overview

10

Static

static

3

8028f9d7e8...af.exe

windows7-x64

10

8028f9d7e8...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8028f9d7e81e310cf7c98580af859f980496a1e9c812ca26d87ee807918bf3af

  • Size

    56KB

  • Sample

    240615-3d17dstajk

  • MD5

    9b9dd522ec6728b205b87c04741eb4e3

  • SHA1

    2de30d4b2257bd823a3e50c9dff72abf7a0b857e

  • SHA256

    8028f9d7e81e310cf7c98580af859f980496a1e9c812ca26d87ee807918bf3af

  • SHA512

    7efc5cba8cac4cf127781169738fd8bf8479021ac2932d2b62ea1693a4a841b1df2c9cbf5e04a641f7baf75839ef405d7f3774658e035eca2fd7b5ba49e47fcb

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIF+8:ymb3NkkiQ3mdBjFIF+8

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8028f9d7e81e310cf7c98580af859f980496a1e9c812ca26d87ee807918bf3af

    • Size

      56KB

    • MD5

      9b9dd522ec6728b205b87c04741eb4e3

    • SHA1

      2de30d4b2257bd823a3e50c9dff72abf7a0b857e

    • SHA256

      8028f9d7e81e310cf7c98580af859f980496a1e9c812ca26d87ee807918bf3af

    • SHA512

      7efc5cba8cac4cf127781169738fd8bf8479021ac2932d2b62ea1693a4a841b1df2c9cbf5e04a641f7baf75839ef405d7f3774658e035eca2fd7b5ba49e47fcb

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIF+8:ymb3NkkiQ3mdBjFIF+8

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks