blackmoon | df12688ebb6ea87fff1694dfdee51aaf1bcdea3f8062cad3ca32074de65d3c67 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

abefdeacfb...0N.exe

windows7-x64

abefdeacfb...0N.exe

windows10-2004-x64

Sharing

General

Target

abefdeacfb2be9da20f2ce9361402060N.exe
Size

64KB
Sample

240820-xs6grsycmh
MD5

abefdeacfb2be9da20f2ce9361402060
SHA1

d9946c952de2e1183d367f728d35218a45da2537
SHA256

df12688ebb6ea87fff1694dfdee51aaf1bcdea3f8062cad3ca32074de65d3c67
SHA512

e5fcd61ef726dc1a526e58ff56e64f8b8a64a3c448582abcc807fbfae9afba0a85e8f334474e9167e8371e479392eff2d8cc48f33849a73a066351771c2f9937
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzkzNr:ymb3NkkiQ3mdBjFIvlpr

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

abefdeacfb2be9da20f2ce9361402060N.exe

Resource

win7-20240708-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

abefdeacfb2be9da20f2ce9361402060N.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  abefdeacfb2be9da20f2ce9361402060N.exe
- Size
  
  64KB
- MD5
  
  abefdeacfb2be9da20f2ce9361402060
- SHA1
  
  d9946c952de2e1183d367f728d35218a45da2537
- SHA256
  
  df12688ebb6ea87fff1694dfdee51aaf1bcdea3f8062cad3ca32074de65d3c67
- SHA512
  
  e5fcd61ef726dc1a526e58ff56e64f8b8a64a3c448582abcc807fbfae9afba0a85e8f334474e9167e8371e479392eff2d8cc48f33849a73a066351771c2f9937
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzkzNr:ymb3NkkiQ3mdBjFIvlpr
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy