Overview

overview

10

Static

static

3

3b0384f34b...0N.exe

windows7-x64

10

3b0384f34b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b0384f34b775f89e3fa8152f69aea00N.exe

  • Size

    64KB

  • Sample

    240909-kptbtazdqj

  • MD5

    3b0384f34b775f89e3fa8152f69aea00

  • SHA1

    150313d40efd42d050e477a60a39c2cb53128425

  • SHA256

    5d01e6d35de5747309468bd034e53021bf353658132038e201b00ce2f3f436f4

  • SHA512

    8b96fed90ebf2397b06fdc0ff81edcef4926e0f0278818949109884bc065c847038fba1fc20132db157d38e9730eb809181b0f678bb6c074bdee14ab860cccd2

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxiM:ymb3NkkiQ3mdBjF0y7kb9

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      3b0384f34b775f89e3fa8152f69aea00N.exe

    • Size

      64KB

    • MD5

      3b0384f34b775f89e3fa8152f69aea00

    • SHA1

      150313d40efd42d050e477a60a39c2cb53128425

    • SHA256

      5d01e6d35de5747309468bd034e53021bf353658132038e201b00ce2f3f436f4

    • SHA512

      8b96fed90ebf2397b06fdc0ff81edcef4926e0f0278818949109884bc065c847038fba1fc20132db157d38e9730eb809181b0f678bb6c074bdee14ab860cccd2

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxiM:ymb3NkkiQ3mdBjF0y7kb9

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks