Overview

overview

10

Static

static

7

b7935a8158...0N.exe

windows7-x64

10

b7935a8158...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b7935a81585032f539f068a656561100N.exe

  • Size

    213KB

  • Sample

    240829-kdhqyatgqq

  • MD5

    b7935a81585032f539f068a656561100

  • SHA1

    54a985e8992395591aea6031ee0f4810dc69b641

  • SHA256

    d68b8974f327245f35e9c2f7f43174e1b603fccbc52af841b99f7979a0af49ff

  • SHA512

    ecdcf47a1e4e9db9bfe9918b56610fe876b1106aaaa724409fe73569c7b78f70469ef26a148e18ab7a890beae6f3b10c9475c31ebd5434c8a2dcb9a53ccc4253

  • SSDEEP

    6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+lt1:V4wFHoSBK/ubLcfX1

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      b7935a81585032f539f068a656561100N.exe

    • Size

      213KB

    • MD5

      b7935a81585032f539f068a656561100

    • SHA1

      54a985e8992395591aea6031ee0f4810dc69b641

    • SHA256

      d68b8974f327245f35e9c2f7f43174e1b603fccbc52af841b99f7979a0af49ff

    • SHA512

      ecdcf47a1e4e9db9bfe9918b56610fe876b1106aaaa724409fe73569c7b78f70469ef26a148e18ab7a890beae6f3b10c9475c31ebd5434c8a2dcb9a53ccc4253

    • SSDEEP

      6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+lt1:V4wFHoSBK/ubLcfX1

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks