blackmoon | 4862c022813c7af4ed293d6108c0acc46cdb74b531faab36ea27bb33e175e22f | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

02f45a3d77...18.exe

windows7-x64

02f45a3d77...18.exe

windows10-2004-x64

Sharing

General

Target

02f45a3d77ea7020705f910c5135be9b_JaffaCakes118
Size

457KB
Sample

240727-3yw36syfkg
MD5

02f45a3d77ea7020705f910c5135be9b
SHA1

0c1bf1c647830cd631897db58e3df42ec4772d99
SHA256

4862c022813c7af4ed293d6108c0acc46cdb74b531faab36ea27bb33e175e22f
SHA512

c7a7c0f052aab2df36590989f3e5f2e6f28df7ce7890b753a7dc9859cdcb1f59110b37214bb763ba4111a1f1e64ecbd0aab6691738948890499764dfd9553c30
SSDEEP

6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1Hssto:d7Tc9Wj16A3Stvxg

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

02f45a3d77ea7020705f910c5135be9b_JaffaCakes118.exe

Resource

win7-20240708-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

02f45a3d77ea7020705f910c5135be9b_JaffaCakes118.exe

Resource

win10v2004-20240709-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  02f45a3d77ea7020705f910c5135be9b_JaffaCakes118
- Size
  
  457KB
- MD5
  
  02f45a3d77ea7020705f910c5135be9b
- SHA1
  
  0c1bf1c647830cd631897db58e3df42ec4772d99
- SHA256
  
  4862c022813c7af4ed293d6108c0acc46cdb74b531faab36ea27bb33e175e22f
- SHA512
  
  c7a7c0f052aab2df36590989f3e5f2e6f28df7ce7890b753a7dc9859cdcb1f59110b37214bb763ba4111a1f1e64ecbd0aab6691738948890499764dfd9553c30
- SSDEEP
  
  6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1Hssto:d7Tc9Wj16A3Stvxg
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy