Overview

overview

10

Static

static

3

220e9024e8...67.exe

windows7-x64

10

220e9024e8...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    220e9024e8e14985ffaa172e09c1a64aa9cd75178f09992a8387a14ff7e7e967

  • Size

    476KB

  • Sample

    240615-yc9d6awgjp

  • MD5

    09095bedf526f418dfd1ae43b1714d58

  • SHA1

    718bf51dfa05cfdaefcb2f24842342a86454d460

  • SHA256

    220e9024e8e14985ffaa172e09c1a64aa9cd75178f09992a8387a14ff7e7e967

  • SHA512

    e5571c66892878f9fdd1ee810756a83956e8d4c2846fa08518ffa4ceff664dd8bfa8e883475b60c0bb9557e25dab141ac02b079b6b0b5f41df8df034bafd2763

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwT+aZKlumArSPBXuGsS:q7Tc2NYHUrAwT+OKomA+5uy

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      220e9024e8e14985ffaa172e09c1a64aa9cd75178f09992a8387a14ff7e7e967

    • Size

      476KB

    • MD5

      09095bedf526f418dfd1ae43b1714d58

    • SHA1

      718bf51dfa05cfdaefcb2f24842342a86454d460

    • SHA256

      220e9024e8e14985ffaa172e09c1a64aa9cd75178f09992a8387a14ff7e7e967

    • SHA512

      e5571c66892878f9fdd1ee810756a83956e8d4c2846fa08518ffa4ceff664dd8bfa8e883475b60c0bb9557e25dab141ac02b079b6b0b5f41df8df034bafd2763

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwT+aZKlumArSPBXuGsS:q7Tc2NYHUrAwT+OKomA+5uy

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks