Overview

overview

10

Static

static

10

8b9ffe80c7...96.exe

windows7-x64

10

8b9ffe80c7...96.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b9ffe80c7b02f40c23e068f6968f1c0c5a1f31e8db64b9c64f310da21655796

  • Size

    186KB

  • Sample

    240620-am1b8sydja

  • MD5

    2aec51c4d38545744e3035ff44640c63

  • SHA1

    c43e3aa654a86ccaa97e7f34289657b71ba8dabe

  • SHA256

    8b9ffe80c7b02f40c23e068f6968f1c0c5a1f31e8db64b9c64f310da21655796

  • SHA512

    e78c83b3f48de5318f81b061822f61a61d470c2c8cb3b80dc8a407bebb59199083ba44075a5fa1dffb6fed7642fc9da74ac3dd7d4c93495549b0bd4ba130a4da

  • SSDEEP

    3072:3hOmTsF93UYfwC6GIoutw8YcvrqrE66kropO6BWlPFH4tw1D43eMu:3cm4FmowdHoSzhraHcpOFltH4twl43vu

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8b9ffe80c7b02f40c23e068f6968f1c0c5a1f31e8db64b9c64f310da21655796

    • Size

      186KB

    • MD5

      2aec51c4d38545744e3035ff44640c63

    • SHA1

      c43e3aa654a86ccaa97e7f34289657b71ba8dabe

    • SHA256

      8b9ffe80c7b02f40c23e068f6968f1c0c5a1f31e8db64b9c64f310da21655796

    • SHA512

      e78c83b3f48de5318f81b061822f61a61d470c2c8cb3b80dc8a407bebb59199083ba44075a5fa1dffb6fed7642fc9da74ac3dd7d4c93495549b0bd4ba130a4da

    • SSDEEP

      3072:3hOmTsF93UYfwC6GIoutw8YcvrqrE66kropO6BWlPFH4tw1D43eMu:3cm4FmowdHoSzhraHcpOFltH4twl43vu

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks