blackmoon | 7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

7db85bc446...bd.exe

windows7-x64

7db85bc446...bd.exe

windows10-2004-x64

Sharing

General

Target

7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd
Size

70KB
Sample

240903-3w9w9asakd
MD5

7988471efb6939dc418a0936e3fccd38
SHA1

2d85a18e650fe503902fefc8c471b9e3e9919c9a
SHA256

7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd
SHA512

a7aa4b70552b993500c9b67a0bfc6b4c7c00cef8876b9e97cae84032cca2be3931008c61b01dd4225206507d9884f2fb3676ec134d65e1466fb0e39a402536f5
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfjK:ymb3NkkiQ3mdBjFI4V6

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd
- Size
  
  70KB
- MD5
  
  7988471efb6939dc418a0936e3fccd38
- SHA1
  
  2d85a18e650fe503902fefc8c471b9e3e9919c9a
- SHA256
  
  7db85bc4464e8c014f5e01ffb26c7e28f53f6e7a242138e8531ca6e7bf2a91bd
- SHA512
  
  a7aa4b70552b993500c9b67a0bfc6b4c7c00cef8876b9e97cae84032cca2be3931008c61b01dd4225206507d9884f2fb3676ec134d65e1466fb0e39a402536f5
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfjK:ymb3NkkiQ3mdBjFI4V6
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy