Overview

overview

10

Static

static

7

f4ebb836be...0N.exe

windows7-x64

10

f4ebb836be...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4ebb836be3ba5c5e65511fbef6c87a0N.exe

  • Size

    337KB

  • Sample

    240821-1k2qdswbqr

  • MD5

    f4ebb836be3ba5c5e65511fbef6c87a0

  • SHA1

    aaa38bd8803858641ae4c7626029089e492eb031

  • SHA256

    252c3746dacd906aaece73c0f49298a06b71558a3ffb628a3b7ac6ae2f49861f

  • SHA512

    2e930431d842fc5ef1a872fd79a121d3641887ca92425c427086c6176dd6bb4e9ce79cf457d92442edd7f1fda8ac18712a90b941d69eb08a38fb811afe0de28c

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiiI:9cm4FmowdHoS4BtguSPKyHP

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      f4ebb836be3ba5c5e65511fbef6c87a0N.exe

    • Size

      337KB

    • MD5

      f4ebb836be3ba5c5e65511fbef6c87a0

    • SHA1

      aaa38bd8803858641ae4c7626029089e492eb031

    • SHA256

      252c3746dacd906aaece73c0f49298a06b71558a3ffb628a3b7ac6ae2f49861f

    • SHA512

      2e930431d842fc5ef1a872fd79a121d3641887ca92425c427086c6176dd6bb4e9ce79cf457d92442edd7f1fda8ac18712a90b941d69eb08a38fb811afe0de28c

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiiI:9cm4FmowdHoS4BtguSPKyHP

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks