Overview

overview

10

Static

static

3

807961a5d0...5c.exe

windows7-x64

10

807961a5d0...5c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    807961a5d0eabfe0c7f696091f919f1452c12e0368fe0e1253e10114e5a1a45c

  • Size

    274KB

  • Sample

    240624-27sxfaxcph

  • MD5

    41b11601b5d41a609dcfe3ffbae04b80

  • SHA1

    37f3be1441ef3fef61333c3e3d2c90dd771a1471

  • SHA256

    807961a5d0eabfe0c7f696091f919f1452c12e0368fe0e1253e10114e5a1a45c

  • SHA512

    c74fa9c06ce64db90ebcced4c7c93d1756c97dc090247b5608c8b1d25f93ed8c36f7ebed06d6c9f3fd0a2310d30d4ed4a7373f336a7217a8060f4ab0638f7e07

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFBO:8cm7ImGddXmNt251UriZFI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      807961a5d0eabfe0c7f696091f919f1452c12e0368fe0e1253e10114e5a1a45c

    • Size

      274KB

    • MD5

      41b11601b5d41a609dcfe3ffbae04b80

    • SHA1

      37f3be1441ef3fef61333c3e3d2c90dd771a1471

    • SHA256

      807961a5d0eabfe0c7f696091f919f1452c12e0368fe0e1253e10114e5a1a45c

    • SHA512

      c74fa9c06ce64db90ebcced4c7c93d1756c97dc090247b5608c8b1d25f93ed8c36f7ebed06d6c9f3fd0a2310d30d4ed4a7373f336a7217a8060f4ab0638f7e07

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFBO:8cm7ImGddXmNt251UriZFI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks