Overview

overview

10

Static

static

3

ef0e83b9f1...0N.exe

windows7-x64

10

ef0e83b9f1...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef0e83b9f1a08caa96b86bb1533f7520N.exe

  • Size

    89KB

  • Sample

    240721-vhpp6axgpm

  • MD5

    ef0e83b9f1a08caa96b86bb1533f7520

  • SHA1

    6ec87152e18a015335f72296751b9e682ee080e5

  • SHA256

    97440b385a89b6fcc1ede473978fa40bf72cd0eb6c5b455ee4ea20a00e4a4eab

  • SHA512

    4a2811fdf19e5b8f253ad7577523ca8a40fdd272c7f253c18f4f8687e5551a6f32f33c18a0c3655bfc5af907378ef5815f27d1f62b4eeba8f792f4c9dfa48638

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3ebSt:ymb3NkkiQ3mdBjF+3TU2K3bJZXjt

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ef0e83b9f1a08caa96b86bb1533f7520N.exe

    • Size

      89KB

    • MD5

      ef0e83b9f1a08caa96b86bb1533f7520

    • SHA1

      6ec87152e18a015335f72296751b9e682ee080e5

    • SHA256

      97440b385a89b6fcc1ede473978fa40bf72cd0eb6c5b455ee4ea20a00e4a4eab

    • SHA512

      4a2811fdf19e5b8f253ad7577523ca8a40fdd272c7f253c18f4f8687e5551a6f32f33c18a0c3655bfc5af907378ef5815f27d1f62b4eeba8f792f4c9dfa48638

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3ebSt:ymb3NkkiQ3mdBjF+3TU2K3bJZXjt

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks