Overview

overview

10

Static

static

3

db221e3fd4...67.exe

windows7-x64

10

db221e3fd4...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db221e3fd49b90c0f4cb5f549c34077d9af88c9a2bbdad6c499e12c1eee66a67

  • Size

    308KB

  • Sample

    240707-eyebcswcmh

  • MD5

    980d1ab878a0de2978a33ec3be2bf849

  • SHA1

    dc4d7b72c37e13b56ab42703814f6eaf129845d3

  • SHA256

    db221e3fd49b90c0f4cb5f549c34077d9af88c9a2bbdad6c499e12c1eee66a67

  • SHA512

    31e3b447ad24a6e90057fa1438e86dd15c5f491b4124db0c5cb4eb0f6076fbd547662e535a40dcbe046c82bee9378ed81594db7760ad412300cca4253dc6e766

  • SSDEEP

    6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vE:n3C9uUnAvtd3Ogld2vE

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      db221e3fd49b90c0f4cb5f549c34077d9af88c9a2bbdad6c499e12c1eee66a67

    • Size

      308KB

    • MD5

      980d1ab878a0de2978a33ec3be2bf849

    • SHA1

      dc4d7b72c37e13b56ab42703814f6eaf129845d3

    • SHA256

      db221e3fd49b90c0f4cb5f549c34077d9af88c9a2bbdad6c499e12c1eee66a67

    • SHA512

      31e3b447ad24a6e90057fa1438e86dd15c5f491b4124db0c5cb4eb0f6076fbd547662e535a40dcbe046c82bee9378ed81594db7760ad412300cca4253dc6e766

    • SSDEEP

      6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vE:n3C9uUnAvtd3Ogld2vE

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks