Overview

overview

10

Static

static

5

42729935bc...d7.exe

windows7-x64

10

42729935bc...d7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    42729935bcf0268bb5aed45933f48cd66d006e01a94b46b274fe42a6fe04a0d7

  • Size

    4.7MB

  • Sample

    240928-en1fvayeka

  • MD5

    b28fc95b70f27e1f9d503055e50c41ad

  • SHA1

    470be24541c2fb97e9da85257843f110d4888d9f

  • SHA256

    42729935bcf0268bb5aed45933f48cd66d006e01a94b46b274fe42a6fe04a0d7

  • SHA512

    eb4239b4e437b6d69f264ebdb56fdeba3f1050e4bbd02a49ad8ddca46295639db4dc87892b41c75c71d0ad6a3b4744b3e8e42407ec6472460f0f521b421085c6

  • SSDEEP

    98304:b+uhMz1+Gcs4Enr6pnKm3NeKV1UW7xmLuofTzIZcWHM4y0/WjVMg:iuKZtcsvnr6pK0j7xma2zIZHHJp+jf

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      42729935bcf0268bb5aed45933f48cd66d006e01a94b46b274fe42a6fe04a0d7

    • Size

      4.7MB

    • MD5

      b28fc95b70f27e1f9d503055e50c41ad

    • SHA1

      470be24541c2fb97e9da85257843f110d4888d9f

    • SHA256

      42729935bcf0268bb5aed45933f48cd66d006e01a94b46b274fe42a6fe04a0d7

    • SHA512

      eb4239b4e437b6d69f264ebdb56fdeba3f1050e4bbd02a49ad8ddca46295639db4dc87892b41c75c71d0ad6a3b4744b3e8e42407ec6472460f0f521b421085c6

    • SSDEEP

      98304:b+uhMz1+Gcs4Enr6pnKm3NeKV1UW7xmLuofTzIZcWHM4y0/WjVMg:iuKZtcsvnr6pK0j7xma2zIZHHJp+jf

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks