Overview

overview

10

Static

static

3

0754a62074...35.exe

windows7-x64

10

0754a62074...35.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0754a62074238e79b66a519a4626913da500eb8663f06ae23876e2b1c9361035

  • Size

    83KB

  • Sample

    240615-w3w6eazhjc

  • MD5

    ba2098de13aabbc783aa5cac54569709

  • SHA1

    60feb31852ac53bb668b656c96b27e66c8583447

  • SHA256

    0754a62074238e79b66a519a4626913da500eb8663f06ae23876e2b1c9361035

  • SHA512

    69c8fb1cd0d549b75e819105bbdf795aeac6c767534662d71a1a5f80228868b0ea895cd814bc57e2007effca572bb5e0f3637941bcb59be78ae7ba15957f18c4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73yqKH/KjvHo+WdNyJ:ymb3NkkiQ3mdBjFo73yX+vI+q8

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0754a62074238e79b66a519a4626913da500eb8663f06ae23876e2b1c9361035

    • Size

      83KB

    • MD5

      ba2098de13aabbc783aa5cac54569709

    • SHA1

      60feb31852ac53bb668b656c96b27e66c8583447

    • SHA256

      0754a62074238e79b66a519a4626913da500eb8663f06ae23876e2b1c9361035

    • SHA512

      69c8fb1cd0d549b75e819105bbdf795aeac6c767534662d71a1a5f80228868b0ea895cd814bc57e2007effca572bb5e0f3637941bcb59be78ae7ba15957f18c4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73yqKH/KjvHo+WdNyJ:ymb3NkkiQ3mdBjFo73yX+vI+q8

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks