Overview

overview

10

Static

static

3

2b2939e9d0...64.exe

windows7-x64

10

2b2939e9d0...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b2939e9d0998ce56c64cc8712c36fb11404fe1014123419b424f2e6d9a5d664

  • Size

    77KB

  • Sample

    240615-yqq5qswhml

  • MD5

    58ada1aac241d7cfb09286381abe4431

  • SHA1

    4bd2f7cb4086a29ebb2ad6f20b6ac168a6f13e9e

  • SHA256

    2b2939e9d0998ce56c64cc8712c36fb11404fe1014123419b424f2e6d9a5d664

  • SHA512

    a5672b1f49f3c3de71da0f9e79231794cd1f9ed8da935788162eb2f83b0f66931eb1e86bd8593ae784d4d2dada92f129b3c1352a73deaebef96b108fc28d3f0b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrAJ:ymb3NkkiQ3mdBjFIIp9L9QrrAJ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      2b2939e9d0998ce56c64cc8712c36fb11404fe1014123419b424f2e6d9a5d664

    • Size

      77KB

    • MD5

      58ada1aac241d7cfb09286381abe4431

    • SHA1

      4bd2f7cb4086a29ebb2ad6f20b6ac168a6f13e9e

    • SHA256

      2b2939e9d0998ce56c64cc8712c36fb11404fe1014123419b424f2e6d9a5d664

    • SHA512

      a5672b1f49f3c3de71da0f9e79231794cd1f9ed8da935788162eb2f83b0f66931eb1e86bd8593ae784d4d2dada92f129b3c1352a73deaebef96b108fc28d3f0b

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrAJ:ymb3NkkiQ3mdBjFIIp9L9QrrAJ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks