Overview

overview

10

Static

static

7

PQ2.exe

windows7-x64

10

PQ2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PQ2.exe

  • Size

    4.6MB

  • Sample

    240615-jmvw7awfln

  • MD5

    336e10c99d696c1b052ecb751bf0669c

  • SHA1

    ed520e384c320d26a5f643d2b55647cc96552a45

  • SHA256

    12cae3c51e1df519f6c55e40b5ff5bd5905cdf6a5e5b4333ddf730f500531b02

  • SHA512

    924e9429a6ad963d0da700246f0230643e932fc3af56d7fbc38809fadc69f7ba3c727b195591e6c77973da22cdd297f323b06c29fda8e2cffafd106b96dddf6e

  • SSDEEP

    98304:2JtTAD3heITIrjMuLLN9oxN49xZjLRej8U4PmRSaXozJlGh:2zsD3UcsPh2NaxZn8j8U4PDa4zJlGh

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      PQ2.exe

    • Size

      4.6MB

    • MD5

      336e10c99d696c1b052ecb751bf0669c

    • SHA1

      ed520e384c320d26a5f643d2b55647cc96552a45

    • SHA256

      12cae3c51e1df519f6c55e40b5ff5bd5905cdf6a5e5b4333ddf730f500531b02

    • SHA512

      924e9429a6ad963d0da700246f0230643e932fc3af56d7fbc38809fadc69f7ba3c727b195591e6c77973da22cdd297f323b06c29fda8e2cffafd106b96dddf6e

    • SSDEEP

      98304:2JtTAD3heITIrjMuLLN9oxN49xZjLRej8U4PmRSaXozJlGh:2zsD3UcsPh2NaxZn8j8U4PDa4zJlGh

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks