Overview

overview

10

Static

static

3

93aea69e15...0N.exe

windows7-x64

10

93aea69e15...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    93aea69e159fd37501f3e1ff2f24cd00N.exe

  • Size

    82KB

  • Sample

    240825-gcrexaxend

  • MD5

    93aea69e159fd37501f3e1ff2f24cd00

  • SHA1

    2587d1ae4ebbf2026951e675974ca00fc894a3b3

  • SHA256

    962925a766a1f709c97a7da20635e268c020a146769cbfe8d660972292250bc4

  • SHA512

    3e757aa17bf31b9e92c08f4e7cfdc32c3b727d00a1dc6d84436e2846a344635a001ef8671152efd76aa2621854d1c5f8deb5d04618ed989d135be581a7315c53

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA897:ymb3NkkiQ3mdBjFIIp9L9QrrA8p

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      93aea69e159fd37501f3e1ff2f24cd00N.exe

    • Size

      82KB

    • MD5

      93aea69e159fd37501f3e1ff2f24cd00

    • SHA1

      2587d1ae4ebbf2026951e675974ca00fc894a3b3

    • SHA256

      962925a766a1f709c97a7da20635e268c020a146769cbfe8d660972292250bc4

    • SHA512

      3e757aa17bf31b9e92c08f4e7cfdc32c3b727d00a1dc6d84436e2846a344635a001ef8671152efd76aa2621854d1c5f8deb5d04618ed989d135be581a7315c53

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA897:ymb3NkkiQ3mdBjFIIp9L9QrrA8p

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks