Overview

overview

10

Static

static

7

3848b4da19...0N.exe

windows7-x64

10

3848b4da19...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3848b4da19cad6f5ae26398aa69895d0N.exe

  • Size

    96KB

  • Sample

    240806-bp7d1avcrk

  • MD5

    3848b4da19cad6f5ae26398aa69895d0

  • SHA1

    49b57da807b55aa2084230b7c4371d3b3f765072

  • SHA256

    6ec8498d60a69c59976829a063ef30a01e1da07f86fe7f16b417c6635dc36670

  • SHA512

    9104fc3d9d0f626046feb6cda97b055d22420ee6db0a7edf4a41498c1e83b20ab4c8216bbef70b78bfc0ddf23932da833e553e673c359b65ab59c6f8ed5c490a

  • SSDEEP

    3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzgj:8cm4FmowdHoSgWrXUgj

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      3848b4da19cad6f5ae26398aa69895d0N.exe

    • Size

      96KB

    • MD5

      3848b4da19cad6f5ae26398aa69895d0

    • SHA1

      49b57da807b55aa2084230b7c4371d3b3f765072

    • SHA256

      6ec8498d60a69c59976829a063ef30a01e1da07f86fe7f16b417c6635dc36670

    • SHA512

      9104fc3d9d0f626046feb6cda97b055d22420ee6db0a7edf4a41498c1e83b20ab4c8216bbef70b78bfc0ddf23932da833e553e673c359b65ab59c6f8ed5c490a

    • SSDEEP

      3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzgj:8cm4FmowdHoSgWrXUgj

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks