Overview

overview

10

Static

static

3

71072d8f8f...cc.exe

windows7-x64

10

71072d8f8f...cc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    71072d8f8f07db6cb7c9d200b0f0fdb6ad6ef0dc957320c8d0c492c0eca5eecc

  • Size

    364KB

  • Sample

    240723-f4zpxszgnn

  • MD5

    6fd395a34161f3224bf2f4d70f42dff0

  • SHA1

    b6bdbdf3f4986ab9b44d8538821635a9e5505936

  • SHA256

    71072d8f8f07db6cb7c9d200b0f0fdb6ad6ef0dc957320c8d0c492c0eca5eecc

  • SHA512

    fc529ac8f24a55c772fecb17ce7529fdb601de778faabfb9220c17ca9ced6e4e242c41a41080a3c7efc04e6cc5caa82a488b943215c5a00f56cab12f4c3c3e43

  • SSDEEP

    6144:n3C9BRo7tvnJ9oH0IRgZvjD8296gnzeZhBuB:n3C9ytvngQj429nnzeZhBk

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      71072d8f8f07db6cb7c9d200b0f0fdb6ad6ef0dc957320c8d0c492c0eca5eecc

    • Size

      364KB

    • MD5

      6fd395a34161f3224bf2f4d70f42dff0

    • SHA1

      b6bdbdf3f4986ab9b44d8538821635a9e5505936

    • SHA256

      71072d8f8f07db6cb7c9d200b0f0fdb6ad6ef0dc957320c8d0c492c0eca5eecc

    • SHA512

      fc529ac8f24a55c772fecb17ce7529fdb601de778faabfb9220c17ca9ced6e4e242c41a41080a3c7efc04e6cc5caa82a488b943215c5a00f56cab12f4c3c3e43

    • SSDEEP

      6144:n3C9BRo7tvnJ9oH0IRgZvjD8296gnzeZhBuB:n3C9ytvngQj429nnzeZhBk

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks