Overview

overview

10

Static

static

3

bcf193ed78...0N.exe

windows7-x64

10

bcf193ed78...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bcf193ed78e38b60658b3db23cb1c300N.exe

  • Size

    329KB

  • Sample

    240904-rmk1zstamc

  • MD5

    bcf193ed78e38b60658b3db23cb1c300

  • SHA1

    224ad25cf51c2bd3f406733f0b1354270e0e7979

  • SHA256

    7d8598fef1266c1228fc2ff19e8c2c7b33b55fee747de5414131cba1a2622253

  • SHA512

    9ba0dc76042cd104625339a4db3d9f7726b87596b7ca62be2618060c7f9703f2b697d75259c60eee7f975c8d549f11e85c09ae94bbc8765ad9cab38796c2c184

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LCgnilBxBqwZK2q6sYTsmZDSFdBE0rXE4ey:n3C9BRo/CEilXBG2qZSlSFdBXE4

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      bcf193ed78e38b60658b3db23cb1c300N.exe

    • Size

      329KB

    • MD5

      bcf193ed78e38b60658b3db23cb1c300

    • SHA1

      224ad25cf51c2bd3f406733f0b1354270e0e7979

    • SHA256

      7d8598fef1266c1228fc2ff19e8c2c7b33b55fee747de5414131cba1a2622253

    • SHA512

      9ba0dc76042cd104625339a4db3d9f7726b87596b7ca62be2618060c7f9703f2b697d75259c60eee7f975c8d549f11e85c09ae94bbc8765ad9cab38796c2c184

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LCgnilBxBqwZK2q6sYTsmZDSFdBE0rXE4ey:n3C9BRo/CEilXBG2qZSlSFdBXE4

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks