Overview

overview

10

Static

static

3

257347a876...0N.exe

windows7-x64

10

257347a876...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    257347a8768c09ab1d99d3f22e7f0ae0N.exe

  • Size

    455KB

  • Sample

    240805-3nv35awdjh

  • MD5

    257347a8768c09ab1d99d3f22e7f0ae0

  • SHA1

    9e17587646ff1f3ed4e42f8be16e5e60f0223bc5

  • SHA256

    06e67d9e35019df1a1f136e8c8912e88ea972a5b60abd13742a1b44209bcc57c

  • SHA512

    354c7622fcc73e6420dc615b535053175162f86c4c3f58b81575ce38f811248ef3f1a611b742cec04ae1a0cfe8b88e98e0d668ff63b5a6b3f6d6e5caf0b5bf3b

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTNAuVV5HB:n3C9yMo+S0L9xRnoq7H9QYNAuVVn

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      257347a8768c09ab1d99d3f22e7f0ae0N.exe

    • Size

      455KB

    • MD5

      257347a8768c09ab1d99d3f22e7f0ae0

    • SHA1

      9e17587646ff1f3ed4e42f8be16e5e60f0223bc5

    • SHA256

      06e67d9e35019df1a1f136e8c8912e88ea972a5b60abd13742a1b44209bcc57c

    • SHA512

      354c7622fcc73e6420dc615b535053175162f86c4c3f58b81575ce38f811248ef3f1a611b742cec04ae1a0cfe8b88e98e0d668ff63b5a6b3f6d6e5caf0b5bf3b

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTNAuVV5HB:n3C9yMo+S0L9xRnoq7H9QYNAuVVn

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks