Overview

overview

10

Static

static

10

077202392d...0N.exe

windows7-x64

10

077202392d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    077202392d5d3f3f325ecec58525ea40N.exe

  • Size

    2.1MB

  • Sample

    240726-pbcjcszgmh

  • MD5

    077202392d5d3f3f325ecec58525ea40

  • SHA1

    6a7e6b965594b941eedb8313c5fff87a9e97ec44

  • SHA256

    36b20b6500b33498ee11ffc0f67f254c39094351c86e6492f4a4571644c154d5

  • SHA512

    5f92011a573f3f4ff3ea17ced69e1e9464fb9282eb0fca210592fcfe0cb0720eda95d67c419e2e61f1af157fee84b0a7fb77bc1b0be0eabecf7500553ddc7831

  • SSDEEP

    49152:waYMgjw1swIyjYApmKqF4mZ5rv0pLh/KxpS2w8I5HnjicCd1byxMpy9L:jAttZ5rv0/CxMjHnjicCd0J

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      077202392d5d3f3f325ecec58525ea40N.exe

    • Size

      2.1MB

    • MD5

      077202392d5d3f3f325ecec58525ea40

    • SHA1

      6a7e6b965594b941eedb8313c5fff87a9e97ec44

    • SHA256

      36b20b6500b33498ee11ffc0f67f254c39094351c86e6492f4a4571644c154d5

    • SHA512

      5f92011a573f3f4ff3ea17ced69e1e9464fb9282eb0fca210592fcfe0cb0720eda95d67c419e2e61f1af157fee84b0a7fb77bc1b0be0eabecf7500553ddc7831

    • SSDEEP

      49152:waYMgjw1swIyjYApmKqF4mZ5rv0pLh/KxpS2w8I5HnjicCd1byxMpy9L:jAttZ5rv0/CxMjHnjicCd0J

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks