Overview

overview

10

Static

static

3

de7fa8f105...0N.exe

windows7-x64

10

de7fa8f105...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    de7fa8f105242a70b6e3bbcff8d282f0N.exe

  • Size

    199KB

  • Sample

    240829-q1b5kavblb

  • MD5

    de7fa8f105242a70b6e3bbcff8d282f0

  • SHA1

    87b83215c934e2ac2ac60a8d800e8f8eac630fb5

  • SHA256

    8f126ae95e8f325ab5f09eaff0b4d9a8a747b70fc39a61686b22dcbb8ab351bb

  • SHA512

    e14a5716bc9fc6da8fd2883206cff667f759695505fb1e014fd690585b38edaeff385fdb1d3ad74284e1193ca3d02f9057ae4b7900bd6928555d0e1bdc31f900

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUmt:n3C9BRIG0asYFm71m8+GdkB9x

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      de7fa8f105242a70b6e3bbcff8d282f0N.exe

    • Size

      199KB

    • MD5

      de7fa8f105242a70b6e3bbcff8d282f0

    • SHA1

      87b83215c934e2ac2ac60a8d800e8f8eac630fb5

    • SHA256

      8f126ae95e8f325ab5f09eaff0b4d9a8a747b70fc39a61686b22dcbb8ab351bb

    • SHA512

      e14a5716bc9fc6da8fd2883206cff667f759695505fb1e014fd690585b38edaeff385fdb1d3ad74284e1193ca3d02f9057ae4b7900bd6928555d0e1bdc31f900

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUmt:n3C9BRIG0asYFm71m8+GdkB9x

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks