Overview

overview

10

Static

static

3

50f579dc60...0N.exe

windows7-x64

10

50f579dc60...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50f579dc6084d23b387337820ccfbad0N.exe

  • Size

    1.2MB

  • Sample

    240824-twp3eazhmm

  • MD5

    50f579dc6084d23b387337820ccfbad0

  • SHA1

    f888d49641f2463cb31cd6b65ae03834a09eac33

  • SHA256

    d5e5795e2dfa28ca7857b7726e77349773956bc2935299aaef934d86869e823e

  • SHA512

    60633c86dfdbf3756a450a1c87f6f2f31f48138ac7a3c6d2c9c1edfde865c7e6f98c25e0a3283c3e43b812f6da14eb9be2e45ca672bb4efb4d9eb264ff58eb33

  • SSDEEP

    24576:ShPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWo:4bazR0vKLXZC

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      50f579dc6084d23b387337820ccfbad0N.exe

    • Size

      1.2MB

    • MD5

      50f579dc6084d23b387337820ccfbad0

    • SHA1

      f888d49641f2463cb31cd6b65ae03834a09eac33

    • SHA256

      d5e5795e2dfa28ca7857b7726e77349773956bc2935299aaef934d86869e823e

    • SHA512

      60633c86dfdbf3756a450a1c87f6f2f31f48138ac7a3c6d2c9c1edfde865c7e6f98c25e0a3283c3e43b812f6da14eb9be2e45ca672bb4efb4d9eb264ff58eb33

    • SSDEEP

      24576:ShPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWo:4bazR0vKLXZC

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks