Overview

overview

10

Static

static

3

49f4ac65f4...19.exe

windows7-x64

10

49f4ac65f4...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49f4ac65f4e760f621708ef8801292b4a185f0be85b3eb27e5f955c17a4fac19

  • Size

    65KB

  • Sample

    240615-z2bd4ayckl

  • MD5

    dd1e13e718dad41022c40e86bd382731

  • SHA1

    51b862bdf654193c7120b50003251b3820223739

  • SHA256

    49f4ac65f4e760f621708ef8801292b4a185f0be85b3eb27e5f955c17a4fac19

  • SHA512

    e87e344717275ce5120e8fbecffe2c3e24a9da8341177af72ea0710fd20714245a626faa3767bd7897883a58428eafa2ae611ff6553a840f3e6cbe3ce67d7bbc

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLU1g7c3I:ymb3NkkiQ3mdBjFoLkV4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      49f4ac65f4e760f621708ef8801292b4a185f0be85b3eb27e5f955c17a4fac19

    • Size

      65KB

    • MD5

      dd1e13e718dad41022c40e86bd382731

    • SHA1

      51b862bdf654193c7120b50003251b3820223739

    • SHA256

      49f4ac65f4e760f621708ef8801292b4a185f0be85b3eb27e5f955c17a4fac19

    • SHA512

      e87e344717275ce5120e8fbecffe2c3e24a9da8341177af72ea0710fd20714245a626faa3767bd7897883a58428eafa2ae611ff6553a840f3e6cbe3ce67d7bbc

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLU1g7c3I:ymb3NkkiQ3mdBjFoLkV4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks