blackmoon | 391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6 | Triage

Submit
Reports

Overview

overview

Static

static

3

391fbaa6a5...6N.exe

windows7-x64

391fbaa6a5...6N.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6N
Size

64KB
Sample

241002-s5vtksxgnb
MD5

6fb3c5046cf94b11ba86145578e9eaf0
SHA1

9585b1a8b9c62b0e4429b2a67329ccc62ce5d590
SHA256

391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6
SHA512

eee1d23bd2fb0ffb184da47433979f52e043e956237602df17ab51a12ba1e881d05daa7b89601b195d0f13dc80f173ff219c7fd1a5239818be24c377ae19f50e
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxiY:ymb3NkkiQ3mdBjF0y7kbv

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6N.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6N.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6N
- Size
  
  64KB
- MD5
  
  6fb3c5046cf94b11ba86145578e9eaf0
- SHA1
  
  9585b1a8b9c62b0e4429b2a67329ccc62ce5d590
- SHA256
  
  391fbaa6a5a5bb69c18aad343d1c725119ff148357e8b270f51cea74099b6bd6
- SHA512
  
  eee1d23bd2fb0ffb184da47433979f52e043e956237602df17ab51a12ba1e881d05daa7b89601b195d0f13dc80f173ff219c7fd1a5239818be24c377ae19f50e
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxiY:ymb3NkkiQ3mdBjF0y7kbv
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy