Overview

overview

10

Static

static

3

2b905c2443...0N.exe

windows7-x64

10

2b905c2443...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b905c244355bd79f7a65b9dcc7fbb00N.exe

  • Size

    71KB

  • Sample

    240914-15kmlszblq

  • MD5

    2b905c244355bd79f7a65b9dcc7fbb00

  • SHA1

    feaaa6077fe0774320833d7092bf91ccab293815

  • SHA256

    12ace5f535a91baa4616d297c4accdea3c415e04198a64afd225c692ca2db0db

  • SHA512

    0a6bec48597fcb0c9a3de6b69eaeb680ea45cd7da2462a9a5b58ba767611aff6ceff59f4ad4e52391a6a64b53c5388fad77925007f2848968932de9f3c4eaa99

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfj4W:ymb3NkkiQ3mdBjFI4VIW

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      2b905c244355bd79f7a65b9dcc7fbb00N.exe

    • Size

      71KB

    • MD5

      2b905c244355bd79f7a65b9dcc7fbb00

    • SHA1

      feaaa6077fe0774320833d7092bf91ccab293815

    • SHA256

      12ace5f535a91baa4616d297c4accdea3c415e04198a64afd225c692ca2db0db

    • SHA512

      0a6bec48597fcb0c9a3de6b69eaeb680ea45cd7da2462a9a5b58ba767611aff6ceff59f4ad4e52391a6a64b53c5388fad77925007f2848968932de9f3c4eaa99

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfj4W:ymb3NkkiQ3mdBjFI4VIW

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks