Overview

overview

10

Static

static

7

afb9d33ffe...0N.exe

windows7-x64

10

afb9d33ffe...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afb9d33ffefffcf3ddb73d8994c0cd50N.exe

  • Size

    188KB

  • Sample

    240828-1r3ahazekq

  • MD5

    afb9d33ffefffcf3ddb73d8994c0cd50

  • SHA1

    b41afc8da9315e9d39134d98b57b2927d4e09ed7

  • SHA256

    09346e9e732bc72e1cc1c05c80d00d1df07e3d9eb20bb38142309c785bf272e6

  • SHA512

    12f24352fd18d6a9a1b494b0a890911015f08142d483d48706df29eb0f73b60d58b8ff8c513af138482c6491572ac2870d67efde1927b831c4eb807d268aa25a

  • SSDEEP

    3072:3hOmTsF93UYfwC6GIoutw8YcvrqrE66kropO6BWlPFH4tw1D43eMC/8:3cm4FmowdHoSzhraHcpOFltH4twl43vz

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      afb9d33ffefffcf3ddb73d8994c0cd50N.exe

    • Size

      188KB

    • MD5

      afb9d33ffefffcf3ddb73d8994c0cd50

    • SHA1

      b41afc8da9315e9d39134d98b57b2927d4e09ed7

    • SHA256

      09346e9e732bc72e1cc1c05c80d00d1df07e3d9eb20bb38142309c785bf272e6

    • SHA512

      12f24352fd18d6a9a1b494b0a890911015f08142d483d48706df29eb0f73b60d58b8ff8c513af138482c6491572ac2870d67efde1927b831c4eb807d268aa25a

    • SSDEEP

      3072:3hOmTsF93UYfwC6GIoutw8YcvrqrE66kropO6BWlPFH4tw1D43eMC/8:3cm4FmowdHoSzhraHcpOFltH4twl43vz

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks