Overview

overview

10

Static

static

3

375e9433c2...ca.exe

windows7-x64

10

375e9433c2...ca.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    375e9433c24c834102600c50e3080c02ec36a5d0fb2ccd838b62fb8384a201ca

  • Size

    415KB

  • Sample

    240615-y8wg6sxbql

  • MD5

    56931f762eaef4bda01b55cb9bece5c1

  • SHA1

    57b9656eeddae00108a89ec7e0cee996383a99f7

  • SHA256

    375e9433c24c834102600c50e3080c02ec36a5d0fb2ccd838b62fb8384a201ca

  • SHA512

    2906af8a8369ed7853c9fd4d25346e9af3485be22e25a6abc1820e12fa6b2220702d02d65cf50217e29404df52394feebb9bf033495fc777a2bbfb5332719589

  • SSDEEP

    12288:n3C9ytvngQj4DtvnV9wLn9UTfC8eieJNBNIsYPy:SgdnJUdnV9S

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      375e9433c24c834102600c50e3080c02ec36a5d0fb2ccd838b62fb8384a201ca

    • Size

      415KB

    • MD5

      56931f762eaef4bda01b55cb9bece5c1

    • SHA1

      57b9656eeddae00108a89ec7e0cee996383a99f7

    • SHA256

      375e9433c24c834102600c50e3080c02ec36a5d0fb2ccd838b62fb8384a201ca

    • SHA512

      2906af8a8369ed7853c9fd4d25346e9af3485be22e25a6abc1820e12fa6b2220702d02d65cf50217e29404df52394feebb9bf033495fc777a2bbfb5332719589

    • SSDEEP

      12288:n3C9ytvngQj4DtvnV9wLn9UTfC8eieJNBNIsYPy:SgdnJUdnV9S

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks