Overview

overview

10

Static

static

3

d564fab474...0N.exe

windows7-x64

10

d564fab474...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d564fab4746176deceab463abf99afe0N.exe

  • Size

    56KB

  • Sample

    240825-af5y5syfnq

  • MD5

    d564fab4746176deceab463abf99afe0

  • SHA1

    06719c0d4adcc9b4230ea518ac290470e5ec1a01

  • SHA256

    6ebfd9e76acf43ad1872434016e3815c13f5df269d06fd624bffd6b3a4269c59

  • SHA512

    fad442a526ccc1982ab524b2b9132298e39b570f463cae25f5c90f125dcb4afea3eb850a475c34b15eb4adb7af0b047f4260dae10fa31adb660861517b9f4ed8

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI/RtoNx:ymb3NkkiQ3mdBjFI/kb

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      d564fab4746176deceab463abf99afe0N.exe

    • Size

      56KB

    • MD5

      d564fab4746176deceab463abf99afe0

    • SHA1

      06719c0d4adcc9b4230ea518ac290470e5ec1a01

    • SHA256

      6ebfd9e76acf43ad1872434016e3815c13f5df269d06fd624bffd6b3a4269c59

    • SHA512

      fad442a526ccc1982ab524b2b9132298e39b570f463cae25f5c90f125dcb4afea3eb850a475c34b15eb4adb7af0b047f4260dae10fa31adb660861517b9f4ed8

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI/RtoNx:ymb3NkkiQ3mdBjFI/kb

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks