Overview

overview

10

Static

static

3

82af18e0e6...32.exe

windows7-x64

10

82af18e0e6...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82af18e0e66e35e29ed364f78b6ca2bf8fbfc590d01426c7b205e7225fdd7c32

  • Size

    64KB

  • Sample

    240705-3m9vws1hka

  • MD5

    efe4ef1cd383c678adf87d2f32ec7abe

  • SHA1

    b28dc3f5cb694a1e703f889798357dfd5b14e2d6

  • SHA256

    82af18e0e66e35e29ed364f78b6ca2bf8fbfc590d01426c7b205e7225fdd7c32

  • SHA512

    18a9d0eaa4da17c95154ab55c5bc91f5b901b9a5f45e634e41dc507c428feed307160d9da3b8e057f1e21948cb3cd24d9c629abfcb885b010a2357807503f968

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvAEaFJL/9X:ymb3NkkiQ3mdBjFIvAvR

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      82af18e0e66e35e29ed364f78b6ca2bf8fbfc590d01426c7b205e7225fdd7c32

    • Size

      64KB

    • MD5

      efe4ef1cd383c678adf87d2f32ec7abe

    • SHA1

      b28dc3f5cb694a1e703f889798357dfd5b14e2d6

    • SHA256

      82af18e0e66e35e29ed364f78b6ca2bf8fbfc590d01426c7b205e7225fdd7c32

    • SHA512

      18a9d0eaa4da17c95154ab55c5bc91f5b901b9a5f45e634e41dc507c428feed307160d9da3b8e057f1e21948cb3cd24d9c629abfcb885b010a2357807503f968

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvAEaFJL/9X:ymb3NkkiQ3mdBjFIvAvR

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks