blackmoon | 8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415 | Triage

Submit
Reports

Overview

overview

Static

static

3

8708b53b73...5N.exe

windows7-x64

8708b53b73...5N.exe

windows10-2004-x64

Sharing

General

Target

8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415N
Size

90KB
Sample

240921-by4z8syhjj
MD5

48cac5b541318c581c4123df169aaef0
SHA1

472a832d4bab130bd6a163dc06aa1cb1be6bd73a
SHA256

8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415
SHA512

3cdd3bc3b47e29c656bca651d8625913e8ff843c4426e2029c6aa8b9a668e6168d8c9855ffec007304fc7383fb67ca38a17213ddc733b96abdfc023bcc5f96c9
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkB6:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS14

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415N.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415N.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415N
- Size
  
  90KB
- MD5
  
  48cac5b541318c581c4123df169aaef0
- SHA1
  
  472a832d4bab130bd6a163dc06aa1cb1be6bd73a
- SHA256
  
  8708b53b7302f59f2859d4e32c66a8d9fbb0f12e5d003bac5570f3744e01a415
- SHA512
  
  3cdd3bc3b47e29c656bca651d8625913e8ff843c4426e2029c6aa8b9a668e6168d8c9855ffec007304fc7383fb67ca38a17213ddc733b96abdfc023bcc5f96c9
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkB6:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS14
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy