Overview

overview

10

Static

static

3

8d04e64b64...0N.exe

windows7-x64

10

8d04e64b64...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d04e64b64402a5a3b06fdedcaa37960N.exe

  • Size

    65KB

  • Sample

    240821-q1gp2s1fkd

  • MD5

    8d04e64b64402a5a3b06fdedcaa37960

  • SHA1

    6930c12c443609e3dd7dff8266e71645557c5edc

  • SHA256

    46603db0dd5bcb6bdc346af16faceda28b8331ce8f5d7218b25330cb35e63e3c

  • SHA512

    9d25895b3cfd7437ba2af6c152947720909cc47a07ee2a12c556998fd77ca5bace6870792a6381687b7a1aa777aecbe2a7131f993b45cb56bfeb221281ed2719

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqfs:ymb3NkkiQ3mdBjFI9cqfs

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      8d04e64b64402a5a3b06fdedcaa37960N.exe

    • Size

      65KB

    • MD5

      8d04e64b64402a5a3b06fdedcaa37960

    • SHA1

      6930c12c443609e3dd7dff8266e71645557c5edc

    • SHA256

      46603db0dd5bcb6bdc346af16faceda28b8331ce8f5d7218b25330cb35e63e3c

    • SHA512

      9d25895b3cfd7437ba2af6c152947720909cc47a07ee2a12c556998fd77ca5bace6870792a6381687b7a1aa777aecbe2a7131f993b45cb56bfeb221281ed2719

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqfs:ymb3NkkiQ3mdBjFI9cqfs

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks