Overview

overview

10

Static

static

3

d04a7d6a01...aN.exe

windows7-x64

10

d04a7d6a01...aN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d04a7d6a013f85ff818557b5fe153de9fce375cb3035c2334a04cdc144a78f7aN.exe

  • Size

    452KB

  • Sample

    240925-c7sh8szhkj

  • MD5

    6b3bde61621b4d94bdd7c13bbbcfe400

  • SHA1

    a0929f33476cb5df9fdc24df04e1cb587c131758

  • SHA256

    d04a7d6a013f85ff818557b5fe153de9fce375cb3035c2334a04cdc144a78f7a

  • SHA512

    e3d7fcff6b73762c29877eb9230a24b4b9a10fc0d2b8ecaec5ed225db4deea5bec5daee6fbcb427de869a69b4c3a0efbe0afd783b5b38d06f927aaee71bf9351

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeO:q7Tc2NYHUrAwfMp3CDO

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      d04a7d6a013f85ff818557b5fe153de9fce375cb3035c2334a04cdc144a78f7aN.exe

    • Size

      452KB

    • MD5

      6b3bde61621b4d94bdd7c13bbbcfe400

    • SHA1

      a0929f33476cb5df9fdc24df04e1cb587c131758

    • SHA256

      d04a7d6a013f85ff818557b5fe153de9fce375cb3035c2334a04cdc144a78f7a

    • SHA512

      e3d7fcff6b73762c29877eb9230a24b4b9a10fc0d2b8ecaec5ed225db4deea5bec5daee6fbcb427de869a69b4c3a0efbe0afd783b5b38d06f927aaee71bf9351

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeO:q7Tc2NYHUrAwfMp3CDO

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks