blackmoon | 39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3a | Triage

Submit
Reports

Overview

overview

Static

static

5

39ed590d82...aN.exe

windows7-x64

39ed590d82...aN.exe

windows10-2004-x64

Sharing

General

Target

39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3aN
Size

332KB
Sample

240930-hp2xvawclh
MD5

96da989c2b5d727854703bdb185df330
SHA1

7178f12528f5cedb509337c0e142884d46af1429
SHA256

39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3a
SHA512

5271e1b16752d856a78c230d80de6d887ab6085df98f3d4fde7a298692207e86591896f062b5e74cd79244e758a0c302b8dc535555042f7e0cd299fa83f90c53
SSDEEP

6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbed:R4wFHoSHYHUrAwfMp3CDd

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3aN.exe

Resource

win7-20240708-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3aN.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3aN
- Size
  
  332KB
- MD5
  
  96da989c2b5d727854703bdb185df330
- SHA1
  
  7178f12528f5cedb509337c0e142884d46af1429
- SHA256
  
  39ed590d824d2d1287f8c597a4d3eddc05146759ba805d654ef05abf43c3ad3a
- SHA512
  
  5271e1b16752d856a78c230d80de6d887ab6085df98f3d4fde7a298692207e86591896f062b5e74cd79244e758a0c302b8dc535555042f7e0cd299fa83f90c53
- SSDEEP
  
  6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbed:R4wFHoSHYHUrAwfMp3CDd
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2024

Terms | Privacy