Overview

overview

10

Static

static

7

93b61e568b...0N.exe

windows7-x64

10

93b61e568b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93b61e568b02cf9dfc98bf093f145070N.exe

  • Size

    99KB

  • Sample

    240727-fhspgs1gng

  • MD5

    93b61e568b02cf9dfc98bf093f145070

  • SHA1

    80942c4dffa97eb852ab7c007794e8bac1e6d437

  • SHA256

    7cc8220dce886c23c0402608c3b0eb6f45600afaa7aa30a7353e0571357c7a10

  • SHA512

    a2c69cbbf3d3cc1dc919b2ba8815d8b12ca15788e11b163194d61576fdc4cbaa2a3216d01f61d7e0d0de5c30540436c6764918694e00040304e4cf160f902eb8

  • SSDEEP

    3072:khOmTsF93UYfwC6GIoutpYcvrqrE6ddWR:kcm4FmowdHoSphra/6

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      93b61e568b02cf9dfc98bf093f145070N.exe

    • Size

      99KB

    • MD5

      93b61e568b02cf9dfc98bf093f145070

    • SHA1

      80942c4dffa97eb852ab7c007794e8bac1e6d437

    • SHA256

      7cc8220dce886c23c0402608c3b0eb6f45600afaa7aa30a7353e0571357c7a10

    • SHA512

      a2c69cbbf3d3cc1dc919b2ba8815d8b12ca15788e11b163194d61576fdc4cbaa2a3216d01f61d7e0d0de5c30540436c6764918694e00040304e4cf160f902eb8

    • SSDEEP

      3072:khOmTsF93UYfwC6GIoutpYcvrqrE6ddWR:kcm4FmowdHoSphra/6

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks