Overview

overview

10

Static

static

7

7405bb7e2a...0N.exe

windows7-x64

10

7405bb7e2a...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7405bb7e2a0c617d44e2e370ecf90e80N.exe

  • Size

    329KB

  • Sample

    240905-2e4hgasanq

  • MD5

    7405bb7e2a0c617d44e2e370ecf90e80

  • SHA1

    df1851e4467df065f80052e29bd84b8918a6148a

  • SHA256

    7eba3f453cb31a13dcd61f5cdb2b0103a056368e0ad7cfb8d9ce18baadf08046

  • SHA512

    b140b4dfdd5394a617eaf96e8bf362f858f95592c1a7b6f2007ab0baae27dd3899899ff5567678f7d97b6c9199017486ad31cc8c844df3a043c72ce6e368cbbe

  • SSDEEP

    6144:vcm4FmowdHoStJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7td:94wFHoStJdSjylh2b77BoTMA9gX59sTF

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      7405bb7e2a0c617d44e2e370ecf90e80N.exe

    • Size

      329KB

    • MD5

      7405bb7e2a0c617d44e2e370ecf90e80

    • SHA1

      df1851e4467df065f80052e29bd84b8918a6148a

    • SHA256

      7eba3f453cb31a13dcd61f5cdb2b0103a056368e0ad7cfb8d9ce18baadf08046

    • SHA512

      b140b4dfdd5394a617eaf96e8bf362f858f95592c1a7b6f2007ab0baae27dd3899899ff5567678f7d97b6c9199017486ad31cc8c844df3a043c72ce6e368cbbe

    • SSDEEP

      6144:vcm4FmowdHoStJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7td:94wFHoStJdSjylh2b77BoTMA9gX59sTF

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks