blackmoon | 6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4 | Triage

Submit
Reports

Overview

overview

Static

static

3

6d227ee48d...a4.exe

windows7-x64

6d227ee48d...a4.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4
Size

187KB
Sample

240810-2j1blswcph
MD5

6ba8f07d28f3f14da5ac81dedab0255c
SHA1

f30c1208d371b89787306f7b0117f475158a97f6
SHA256

6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4
SHA512

4a5301aaed63649038e367c4fa61c3a00992c87014f5da3d737482eccabb6bc944cef3cd9cd0f7d012666944918f7056fe8ba0755c635f3e2fc384df36eff1dd
SSDEEP

1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+EMdb4SAk:PhOm2sI93UufdC67ciJTWMdbHAk

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4.exe

Resource

win7-20240704-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4
- Size
  
  187KB
- MD5
  
  6ba8f07d28f3f14da5ac81dedab0255c
- SHA1
  
  f30c1208d371b89787306f7b0117f475158a97f6
- SHA256
  
  6d227ee48d8a559d20c3df9ad89642933ab27e373f4a9718482d4ca2ce915aa4
- SHA512
  
  4a5301aaed63649038e367c4fa61c3a00992c87014f5da3d737482eccabb6bc944cef3cd9cd0f7d012666944918f7056fe8ba0755c635f3e2fc384df36eff1dd
- SSDEEP
  
  1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+EMdb4SAk:PhOm2sI93UufdC67ciJTWMdbHAk
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy