Overview

overview

10

Static

static

7

cfbcce68fb...df.exe

windows7-x64

10

cfbcce68fb...df.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfbcce68fbc601a8b25a9f64507e7062ca637356870589305902fb5e7bf49fdf

  • Size

    91KB

  • Sample

    240711-gqphgasdmm

  • MD5

    dfd43a71467ebff18fdeddc0c2c04d89

  • SHA1

    20e97ca1063781a3a7517faa8a9334fd5e097446

  • SHA256

    cfbcce68fbc601a8b25a9f64507e7062ca637356870589305902fb5e7bf49fdf

  • SHA512

    20bd1d11e1e6dbd030112ff0f2be86d5c242fbcc286ad227bf477c29f5abb9bebaa0242bcc717e50ac82d314df79d6bfdc59952adead82b92d6213fa9d3de4b3

  • SSDEEP

    1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8mVeygryFU2li0gx4EBbhnyLFW+7:chOmTsF93UYfwC6GIoutieyhC2lbgGiW

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cfbcce68fbc601a8b25a9f64507e7062ca637356870589305902fb5e7bf49fdf

    • Size

      91KB

    • MD5

      dfd43a71467ebff18fdeddc0c2c04d89

    • SHA1

      20e97ca1063781a3a7517faa8a9334fd5e097446

    • SHA256

      cfbcce68fbc601a8b25a9f64507e7062ca637356870589305902fb5e7bf49fdf

    • SHA512

      20bd1d11e1e6dbd030112ff0f2be86d5c242fbcc286ad227bf477c29f5abb9bebaa0242bcc717e50ac82d314df79d6bfdc59952adead82b92d6213fa9d3de4b3

    • SSDEEP

      1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8mVeygryFU2li0gx4EBbhnyLFW+7:chOmTsF93UYfwC6GIoutieyhC2lbgGiW

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks