Overview

overview

10

Static

static

3

692b171846...1e.exe

windows7-x64

10

692b171846...1e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    692b171846ce112664a57eef9e7cc7197a5a4bde0f99582c71fb06b78d66421e

  • Size

    78KB

  • Sample

    240708-31jkvswapn

  • MD5

    c74192a8021f3f0d521a2a278d7664bf

  • SHA1

    4049d70da0c4018c377a04879d3464c821bdee59

  • SHA256

    692b171846ce112664a57eef9e7cc7197a5a4bde0f99582c71fb06b78d66421e

  • SHA512

    9fa776ffc694b6b0afdfd827faef394028a1268b6331cd07e151d79f1f372a1b311e54aa562e491f4c39003ef68f48e6d922d84207a3c1172499a252ec4f42ad

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIjaQkPcy8WTeAwHWkMBLrjD:ymb3NkkiQ3mdBjFIpkPcy8qsHjCLrjD

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      692b171846ce112664a57eef9e7cc7197a5a4bde0f99582c71fb06b78d66421e

    • Size

      78KB

    • MD5

      c74192a8021f3f0d521a2a278d7664bf

    • SHA1

      4049d70da0c4018c377a04879d3464c821bdee59

    • SHA256

      692b171846ce112664a57eef9e7cc7197a5a4bde0f99582c71fb06b78d66421e

    • SHA512

      9fa776ffc694b6b0afdfd827faef394028a1268b6331cd07e151d79f1f372a1b311e54aa562e491f4c39003ef68f48e6d922d84207a3c1172499a252ec4f42ad

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIjaQkPcy8WTeAwHWkMBLrjD:ymb3NkkiQ3mdBjFIpkPcy8qsHjCLrjD

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks