Overview

overview

10

Static

static

3

f03fd34d1f...f8.exe

windows7-x64

10

f03fd34d1f...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f03fd34d1fc39c7bd3151b7ec4b9cd492b531bde795d51c83e4fa41907149ef8

  • Size

    65KB

  • Sample

    240715-ltxepszgml

  • MD5

    bd8cb5de0ddc084e29de443333e49440

  • SHA1

    5bc2f2b6e573e75b87748f58d6fb8f9befcae7f5

  • SHA256

    f03fd34d1fc39c7bd3151b7ec4b9cd492b531bde795d51c83e4fa41907149ef8

  • SHA512

    d51c4cfcfd9ac533cac3431bb56d948e2972a5631a1665f54adf92870fc9febd26f3ed69f2f6985d301bb97c522323061e0ddcfd284d462b9fb38d4398970077

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJULh1214ar:ymb3NkkiQ3mdBjFIFdJmdar

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      f03fd34d1fc39c7bd3151b7ec4b9cd492b531bde795d51c83e4fa41907149ef8

    • Size

      65KB

    • MD5

      bd8cb5de0ddc084e29de443333e49440

    • SHA1

      5bc2f2b6e573e75b87748f58d6fb8f9befcae7f5

    • SHA256

      f03fd34d1fc39c7bd3151b7ec4b9cd492b531bde795d51c83e4fa41907149ef8

    • SHA512

      d51c4cfcfd9ac533cac3431bb56d948e2972a5631a1665f54adf92870fc9febd26f3ed69f2f6985d301bb97c522323061e0ddcfd284d462b9fb38d4398970077

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJULh1214ar:ymb3NkkiQ3mdBjFIFdJmdar

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks