Overview

overview

10

Static

static

3

a44ca23e6c...0N.exe

windows7-x64

10

a44ca23e6c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a44ca23e6c32e757a8af9f62724c82e0N.exe

  • Size

    82KB

  • Sample

    240902-aegvxswgmg

  • MD5

    a44ca23e6c32e757a8af9f62724c82e0

  • SHA1

    8e0d4426e69ca6586ec08d62b9df2a4c3c38599d

  • SHA256

    16de9be2dd30e941db7dbcab10a105cb4eae972b9547dc6130b8e3ce0ae9ed12

  • SHA512

    1b2ebb464d5269e48d2593234f6c32c8aef37afc1654ecee9f28e39712294e47e0c9cce204e53013dab85384aaecdeae07f394ab30d3551ebc23318007edd59a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYSePfg:ymb3NkkiQ3mdBjFo7LAIbTePfg

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      a44ca23e6c32e757a8af9f62724c82e0N.exe

    • Size

      82KB

    • MD5

      a44ca23e6c32e757a8af9f62724c82e0

    • SHA1

      8e0d4426e69ca6586ec08d62b9df2a4c3c38599d

    • SHA256

      16de9be2dd30e941db7dbcab10a105cb4eae972b9547dc6130b8e3ce0ae9ed12

    • SHA512

      1b2ebb464d5269e48d2593234f6c32c8aef37afc1654ecee9f28e39712294e47e0c9cce204e53013dab85384aaecdeae07f394ab30d3551ebc23318007edd59a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYSePfg:ymb3NkkiQ3mdBjFo7LAIbTePfg

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks