blackmoon | 78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

78a35712be...5N.exe

windows7-x64

78a35712be...5N.exe

windows10-2004-x64

Sharing

General

Target

78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5N
Size

74KB
Sample

240919-xd19havcln
MD5

a99ea0baaff098042eb0cf15c7f5e1e0
SHA1

38b575dce409c5fae6017c3f60910836c386ac51
SHA256

78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5
SHA512

0b1afa913d14e66aac7bd9c70fd3a543822d5efe207e04b8213d7e1c8524b660624986fe0ecfaec0739980bb3fc79285141085ee797fc8a5479ba3e0765e9691
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPK:ymb3NkkiQ3mdBjFIvl358nLA89OMFVHX

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5N.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5N.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5N
- Size
  
  74KB
- MD5
  
  a99ea0baaff098042eb0cf15c7f5e1e0
- SHA1
  
  38b575dce409c5fae6017c3f60910836c386ac51
- SHA256
  
  78a35712bea1d4d5764b2961204229ffb58eb5164771e264310750a0be6be2b5
- SHA512
  
  0b1afa913d14e66aac7bd9c70fd3a543822d5efe207e04b8213d7e1c8524b660624986fe0ecfaec0739980bb3fc79285141085ee797fc8a5479ba3e0765e9691
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPK:ymb3NkkiQ3mdBjFIvl358nLA89OMFVHX
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy