Overview

overview

10

Static

static

7

b1e79a7f79...0N.exe

windows7-x64

10

b1e79a7f79...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1e79a7f79514e48516a1d619d74a010N.exe

  • Size

    272KB

  • Sample

    240726-kysfwasakd

  • MD5

    b1e79a7f79514e48516a1d619d74a010

  • SHA1

    cdbdcf4d32a309665d298e63137b50063d9f9dd4

  • SHA256

    a8e2340c42091c8190e126fc0bd8bde2715bac7000eecb77b3a8a6866f842746

  • SHA512

    a4cf18ce6a4fc695db9009612b9aa7ce786c47b463ffd05a1caf6402c410fc55a05d027c6db1ea3a1fdf0b5fb19b9fdb5aaa95d52e2efc4fcb5b4c316b88f83d

  • SSDEEP

    3072:LhOmTsF93UYfwC6GIoutVwT0JOfZKldUIbvpynrSPBPOY4W5oo:Lcm4FmowdHoSVwT+aZKlumArSPBPJH

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      b1e79a7f79514e48516a1d619d74a010N.exe

    • Size

      272KB

    • MD5

      b1e79a7f79514e48516a1d619d74a010

    • SHA1

      cdbdcf4d32a309665d298e63137b50063d9f9dd4

    • SHA256

      a8e2340c42091c8190e126fc0bd8bde2715bac7000eecb77b3a8a6866f842746

    • SHA512

      a4cf18ce6a4fc695db9009612b9aa7ce786c47b463ffd05a1caf6402c410fc55a05d027c6db1ea3a1fdf0b5fb19b9fdb5aaa95d52e2efc4fcb5b4c316b88f83d

    • SSDEEP

      3072:LhOmTsF93UYfwC6GIoutVwT0JOfZKldUIbvpynrSPBPOY4W5oo:Lcm4FmowdHoSVwT+aZKlumArSPBPJH

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks