blackmoon | 407c3a4a359e25417c213b7384425234d72d917a8346e63d5440273e823335a0 | Triage

Submit
Reports

Overview

overview

Static

static

3

Trojan.Win...PQ.exe

windows7-x64

Trojan.Win...PQ.exe

windows10-2004-x64

Sharing

General

Target

Trojan.Win32.Amadey.RPQ.MTB-407c3a4a359e25417c213b7384425234d72d917a8346e63d5440273e823335a0N
Size

82KB
Sample

240919-spkzfawckn
MD5

b7e10299e9ad6c8b50e9bcb5527bb7e0
SHA1

f8bdc4b7951da1783693af1be48e3b0181ff75a7
SHA256

407c3a4a359e25417c213b7384425234d72d917a8346e63d5440273e823335a0
SHA512

72909501ee40211ec21c13b3dda1ca6155cc2f7bf38a7830d29c2f05ef8d55390e3c55d9ad09a0a0f6e80a7a8960ba66c8bf045bf5c2ed72756ce6ed2b291df7
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QT:ymb3NkkiQ3mdBjFIIp9L9QrrA8+

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Trojan.Win32.Amadey.RPQ.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

Trojan.Win32.Amadey.RPQ.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  Trojan.Win32.Amadey.RPQ.MTB-407c3a4a359e25417c213b7384425234d72d917a8346e63d5440273e823335a0N
- Size
  
  82KB
- MD5
  
  b7e10299e9ad6c8b50e9bcb5527bb7e0
- SHA1
  
  f8bdc4b7951da1783693af1be48e3b0181ff75a7
- SHA256
  
  407c3a4a359e25417c213b7384425234d72d917a8346e63d5440273e823335a0
- SHA512
  
  72909501ee40211ec21c13b3dda1ca6155cc2f7bf38a7830d29c2f05ef8d55390e3c55d9ad09a0a0f6e80a7a8960ba66c8bf045bf5c2ed72756ce6ed2b291df7
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QT:ymb3NkkiQ3mdBjFIIp9L9QrrA8+
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy