Overview

overview

10

Static

static

10

05bc1a9877...82.exe

windows7-x64

10

05bc1a9877...82.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482

  • Size

    14.0MB

  • Sample

    240701-vx29sszfkc

  • MD5

    006f0f7c702adba2a53f017222b9dee5

  • SHA1

    29ec0deb2fcd711d2326eb5789860cc3d803dc4a

  • SHA256

    05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482

  • SHA512

    b1e92ac4c44e917039862ef002049e75932c32610a96b71e29638b6435d8bca047f34b9292fbd75a9555858973250e6d51a8020a4a5967566e3bff2e9821bb86

  • SSDEEP

    393216:vkys9yqrm2R05UJiDbHP5PT27hEOf7ZJ2xLdYUuPzMIew4aPJA7q:c99ZsCcDbHP12rzz2xp16oqJAu

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482

    • Size

      14.0MB

    • MD5

      006f0f7c702adba2a53f017222b9dee5

    • SHA1

      29ec0deb2fcd711d2326eb5789860cc3d803dc4a

    • SHA256

      05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482

    • SHA512

      b1e92ac4c44e917039862ef002049e75932c32610a96b71e29638b6435d8bca047f34b9292fbd75a9555858973250e6d51a8020a4a5967566e3bff2e9821bb86

    • SSDEEP

      393216:vkys9yqrm2R05UJiDbHP5PT27hEOf7ZJ2xLdYUuPzMIew4aPJA7q:c99ZsCcDbHP12rzz2xp16oqJAu

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks