Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9882e6012a21213aeb9f6f4ea8d5e23e52afae6b8993a352bfc582bcc42c3fe

  • Size

    652KB

  • Sample

    240804-jggglsthph

  • MD5

    017933f498a5e5fec5429ac2a1dc3b4a

  • SHA1

    ef736e19e28df8c4e56f28ce60abfd782125b526

  • SHA256

    e9882e6012a21213aeb9f6f4ea8d5e23e52afae6b8993a352bfc582bcc42c3fe

  • SHA512

    c5143ea72e7c110b243783e15cb14f95f9dbaa58c7a2d69036a3b50ade0ce84791f40ff481fa932992be310c54dca2bf1683732d274831d205acbd828bd31043

  • SSDEEP

    12288:k06bh5/NxtL/fnCchqxdQ36oAT4fUrYhfRE8aK88dPVJm+CGXbu6731CJCoSe:kBbh5/Nxtrh4u36N4fUspWg3m/Glz1Cv

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      e9882e6012a21213aeb9f6f4ea8d5e23e52afae6b8993a352bfc582bcc42c3fe

    • Size

      652KB

    • MD5

      017933f498a5e5fec5429ac2a1dc3b4a

    • SHA1

      ef736e19e28df8c4e56f28ce60abfd782125b526

    • SHA256

      e9882e6012a21213aeb9f6f4ea8d5e23e52afae6b8993a352bfc582bcc42c3fe

    • SHA512

      c5143ea72e7c110b243783e15cb14f95f9dbaa58c7a2d69036a3b50ade0ce84791f40ff481fa932992be310c54dca2bf1683732d274831d205acbd828bd31043

    • SSDEEP

      12288:k06bh5/NxtL/fnCchqxdQ36oAT4fUrYhfRE8aK88dPVJm+CGXbu6731CJCoSe:kBbh5/Nxtrh4u36N4fUspWg3m/Glz1Cv

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks