Overview

overview

10

Static

static

3

d44e76a0ae...0N.exe

windows7-x64

10

d44e76a0ae...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d44e76a0aecf8ac8b45cd5e7fe5eca10N.exe

  • Size

    75KB

  • Sample

    240903-h5h5nssbke

  • MD5

    d44e76a0aecf8ac8b45cd5e7fe5eca10

  • SHA1

    0c44fc9dacaf23db6b6e5bade16817cd9fd079e8

  • SHA256

    a09506657e0c5361e617d73e042b75b2f81112e7e6969e110cdbd2d52cafb4c3

  • SHA512

    956cab261db65d0f858b040858655e3a2a50cb05b556b28f1ff5c13fc72204c75deeead95d7e25197b9085c6a91e9417b3103e0996366185078b64ad1124dab6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb7tAHEqSCkKWRpAYDY:ymb3NkkiQ3mdBjFIynIK8KY8

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      d44e76a0aecf8ac8b45cd5e7fe5eca10N.exe

    • Size

      75KB

    • MD5

      d44e76a0aecf8ac8b45cd5e7fe5eca10

    • SHA1

      0c44fc9dacaf23db6b6e5bade16817cd9fd079e8

    • SHA256

      a09506657e0c5361e617d73e042b75b2f81112e7e6969e110cdbd2d52cafb4c3

    • SHA512

      956cab261db65d0f858b040858655e3a2a50cb05b556b28f1ff5c13fc72204c75deeead95d7e25197b9085c6a91e9417b3103e0996366185078b64ad1124dab6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb7tAHEqSCkKWRpAYDY:ymb3NkkiQ3mdBjFIynIK8KY8

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks