Overview

overview

10

Static

static

3

07440d3a1c...0N.exe

windows7-x64

10

07440d3a1c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    07440d3a1c90984196ea2cc7ddf8d9b0N.exe

  • Size

    129KB

  • Sample

    240814-g43l9asgnj

  • MD5

    07440d3a1c90984196ea2cc7ddf8d9b0

  • SHA1

    a7eeaaee28680279542747c24e8cc6a42ac58d36

  • SHA256

    7a5ceee94fa8ed31bd25f2f57546684f666bf2eb8ff098a72e1f9d7c13e09f13

  • SHA512

    5bd9e39c1994707f679697bd984a7ba268aa6407a8df1569d8743cb6b800461fc277efba9ccfa80ef26c743c117abe63e2054b0024b0dc8ef29c25bbc825cb8a

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afodnmm9Ao98h3dktX4/J9:n3C9BRW0j/tmm9nwytIX

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      07440d3a1c90984196ea2cc7ddf8d9b0N.exe

    • Size

      129KB

    • MD5

      07440d3a1c90984196ea2cc7ddf8d9b0

    • SHA1

      a7eeaaee28680279542747c24e8cc6a42ac58d36

    • SHA256

      7a5ceee94fa8ed31bd25f2f57546684f666bf2eb8ff098a72e1f9d7c13e09f13

    • SHA512

      5bd9e39c1994707f679697bd984a7ba268aa6407a8df1569d8743cb6b800461fc277efba9ccfa80ef26c743c117abe63e2054b0024b0dc8ef29c25bbc825cb8a

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afodnmm9Ao98h3dktX4/J9:n3C9BRW0j/tmm9nwytIX

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks