Overview

overview

10

Static

static

7

b8cf340282...0N.exe

windows7-x64

10

b8cf340282...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b8cf340282045415035d65e13c0808b0N.exe

  • Size

    466KB

  • Sample

    240822-2t4rsathrn

  • MD5

    b8cf340282045415035d65e13c0808b0

  • SHA1

    7c5a74049497261645f90a7ec274ed1c9e5fe2b5

  • SHA256

    ef419bd89de0169b8748a52e5ec12e6545c23897503091eea881e9588293fb31

  • SHA512

    39fc3a889db80fa1117007b54b1a828cc8e546dae718d7eb181397376cb8dda39430b0143a605e74da5ae9deaf043299d378148cff7647dbc113c0cebe2624e0

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V9:VeR0oykayRFp3lztP+OKaf1V9

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      b8cf340282045415035d65e13c0808b0N.exe

    • Size

      466KB

    • MD5

      b8cf340282045415035d65e13c0808b0

    • SHA1

      7c5a74049497261645f90a7ec274ed1c9e5fe2b5

    • SHA256

      ef419bd89de0169b8748a52e5ec12e6545c23897503091eea881e9588293fb31

    • SHA512

      39fc3a889db80fa1117007b54b1a828cc8e546dae718d7eb181397376cb8dda39430b0143a605e74da5ae9deaf043299d378148cff7647dbc113c0cebe2624e0

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V9:VeR0oykayRFp3lztP+OKaf1V9

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks