Overview

overview

10

Static

static

3

94fbc3ddbf...0N.exe

windows7-x64

10

94fbc3ddbf...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    94fbc3ddbf6c2cd6ef7333579a6d1790N.exe

  • Size

    128KB

  • Sample

    240806-mdds4awhjm

  • MD5

    94fbc3ddbf6c2cd6ef7333579a6d1790

  • SHA1

    45e8647df106bc336dd7bc0d3636c5ecb7e4370d

  • SHA256

    fe74b93f780343e1656d7f29469a3da36086bc48c4ed1ca7a245202904e6a002

  • SHA512

    5888268fa3d2be9826c45e8753d2159d8f3b8f032c91b86d09713c5d5e287e0403519c29c539fda14fc5ae467fae722e20befa667743a94e9d66783c60074968

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gFbctg0IyAyhZvjDUC:n3C9BRo7tvnJ9oH0IRgZvjDB

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      94fbc3ddbf6c2cd6ef7333579a6d1790N.exe

    • Size

      128KB

    • MD5

      94fbc3ddbf6c2cd6ef7333579a6d1790

    • SHA1

      45e8647df106bc336dd7bc0d3636c5ecb7e4370d

    • SHA256

      fe74b93f780343e1656d7f29469a3da36086bc48c4ed1ca7a245202904e6a002

    • SHA512

      5888268fa3d2be9826c45e8753d2159d8f3b8f032c91b86d09713c5d5e287e0403519c29c539fda14fc5ae467fae722e20befa667743a94e9d66783c60074968

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gFbctg0IyAyhZvjDUC:n3C9BRo7tvnJ9oH0IRgZvjDB

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks