blackmoon | 1569b7d77388f600014e7874fd12d2988c6046b93b9efcde5c6b3c2f284ee5ed | Triage

Submit
Reports

Overview

overview

Static

static

3

f59154d4b5...0N.exe

windows7-x64

f59154d4b5...0N.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

f59154d4b5c203cc7b5848710dbb4160N.exe
Size

230KB
Sample

240906-axn2yswfnn
MD5

f59154d4b5c203cc7b5848710dbb4160
SHA1

1e41f5362c3ccc130fec629089297570491f934b
SHA256

1569b7d77388f600014e7874fd12d2988c6046b93b9efcde5c6b3c2f284ee5ed
SHA512

b1c3af4fe16032fea44d31969276e93d4b70fdc60416a00419bf017f3c9206927dfc5f238772b1c80a0b086753f0c7b9effde3a086c14d879974c1635a3cebc6
SSDEEP

3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLjBeG+k:n3C9BRo7MlrWKo+lxKJ

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f59154d4b5c203cc7b5848710dbb4160N.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

f59154d4b5c203cc7b5848710dbb4160N.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  f59154d4b5c203cc7b5848710dbb4160N.exe
- Size
  
  230KB
- MD5
  
  f59154d4b5c203cc7b5848710dbb4160
- SHA1
  
  1e41f5362c3ccc130fec629089297570491f934b
- SHA256
  
  1569b7d77388f600014e7874fd12d2988c6046b93b9efcde5c6b3c2f284ee5ed
- SHA512
  
  b1c3af4fe16032fea44d31969276e93d4b70fdc60416a00419bf017f3c9206927dfc5f238772b1c80a0b086753f0c7b9effde3a086c14d879974c1635a3cebc6
- SSDEEP
  
  3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLjBeG+k:n3C9BRo7MlrWKo+lxKJ
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy