Overview

overview

10

Static

static

3

14f97be873...0N.exe

windows7-x64

10

14f97be873...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    14f97be87339871369dceaa3d3107520N.exe

  • Size

    261KB

  • Sample

    240817-qyp9eayapg

  • MD5

    14f97be87339871369dceaa3d3107520

  • SHA1

    58421b7eab5fdea7350aac75196538af9c430a9d

  • SHA256

    461ec328c30a3cefb1be61ba9f7dd0569a861dc696c9cd5294626a0d4ced3a47

  • SHA512

    61654cf5f3216dcb01532a2fa4159399a16a0d3cf0d5522c66f8259f3732dcbb06eaa3d5a2a6f488b5bbbea050c434df272eb1420ae72c61135eddaa29564ebf

  • SSDEEP

    6144:n3C9BRo7tvnJ9Fywhk/T4i37K3BoKg0qS:n3C9ytvn8whkb4i3e3GF/S

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      14f97be87339871369dceaa3d3107520N.exe

    • Size

      261KB

    • MD5

      14f97be87339871369dceaa3d3107520

    • SHA1

      58421b7eab5fdea7350aac75196538af9c430a9d

    • SHA256

      461ec328c30a3cefb1be61ba9f7dd0569a861dc696c9cd5294626a0d4ced3a47

    • SHA512

      61654cf5f3216dcb01532a2fa4159399a16a0d3cf0d5522c66f8259f3732dcbb06eaa3d5a2a6f488b5bbbea050c434df272eb1420ae72c61135eddaa29564ebf

    • SSDEEP

      6144:n3C9BRo7tvnJ9Fywhk/T4i37K3BoKg0qS:n3C9ytvn8whkb4i3e3GF/S

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks