blackmoon | 530a2820f4c38968c34f8d71389c64923e9eb024e916502e6cc085bc626aca06 | Triage

Submit
Reports

Overview

overview

Static

static

7

6858dd8a9d...0N.exe

windows7-x64

6858dd8a9d...0N.exe

windows10-2004-x64

Sharing

General

Target

6858dd8a9d60f01b5dc270a39bf16450N.exe
Size

75KB
Sample

240822-pqay3sxblb
MD5

6858dd8a9d60f01b5dc270a39bf16450
SHA1

6a5b5a308d1a7219a670ef8a77683a0b057f102a
SHA256

530a2820f4c38968c34f8d71389c64923e9eb024e916502e6cc085bc626aca06
SHA512

591ef44e496d9fc770dc1f7bc830dd23d132de83819fa2ebac7258baa3160f1bcc49a3e1212b8a73c5bcdefe6f98842fb314e747afe0f5c3786d0da0341d7b83
SSDEEP

1536:NvQBeOGtrYS3srx93UBWfwC6Ggnouy8KlAXmAXIBG/+WIFuTKLXvCB5yAXNlIQky:NhOmTsF93UYfwC6GIoutOP/WWGKL/SYo

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6858dd8a9d60f01b5dc270a39bf16450N.exe

Resource

win7-20240708-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

6858dd8a9d60f01b5dc270a39bf16450N.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  6858dd8a9d60f01b5dc270a39bf16450N.exe
- Size
  
  75KB
- MD5
  
  6858dd8a9d60f01b5dc270a39bf16450
- SHA1
  
  6a5b5a308d1a7219a670ef8a77683a0b057f102a
- SHA256
  
  530a2820f4c38968c34f8d71389c64923e9eb024e916502e6cc085bc626aca06
- SHA512
  
  591ef44e496d9fc770dc1f7bc830dd23d132de83819fa2ebac7258baa3160f1bcc49a3e1212b8a73c5bcdefe6f98842fb314e747afe0f5c3786d0da0341d7b83
- SSDEEP
  
  1536:NvQBeOGtrYS3srx93UBWfwC6Ggnouy8KlAXmAXIBG/+WIFuTKLXvCB5yAXNlIQky:NhOmTsF93UYfwC6GIoutOP/WWGKL/SYo
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy