Overview

overview

10

Static

static

3

8032b3f303...d2.exe

windows7-x64

10

8032b3f303...d2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8032b3f303fdf6ef49b02520d2468cc21eb0757154e7768c3fa0e6d591b289d2

  • Size

    416KB

  • Sample

    240704-aabs4stall

  • MD5

    ad169e1ed6dcee2cb51b6ae2b68181a1

  • SHA1

    42a64bcad08b4863d2ce813364a555a0a2a5be3d

  • SHA256

    8032b3f303fdf6ef49b02520d2468cc21eb0757154e7768c3fa0e6d591b289d2

  • SHA512

    ff8f68dec452ec7a9d86b44619d6c6581948779baeed97476a352df3cf372b0fe8a9a52ad38d7f391d1ab32b7b3c95f6303e4fac42215818878394927f162a22

  • SSDEEP

    12288:n3C9ytvngQj4DtvnV9wLn9UTfC8eieJNBNIsYPX:SgdnJUdnV93

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8032b3f303fdf6ef49b02520d2468cc21eb0757154e7768c3fa0e6d591b289d2

    • Size

      416KB

    • MD5

      ad169e1ed6dcee2cb51b6ae2b68181a1

    • SHA1

      42a64bcad08b4863d2ce813364a555a0a2a5be3d

    • SHA256

      8032b3f303fdf6ef49b02520d2468cc21eb0757154e7768c3fa0e6d591b289d2

    • SHA512

      ff8f68dec452ec7a9d86b44619d6c6581948779baeed97476a352df3cf372b0fe8a9a52ad38d7f391d1ab32b7b3c95f6303e4fac42215818878394927f162a22

    • SSDEEP

      12288:n3C9ytvngQj4DtvnV9wLn9UTfC8eieJNBNIsYPX:SgdnJUdnV93

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks