blackmoon | a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4c | Triage

Submit
Reports

Overview

overview

Static

static

3

a646cb4b5e...cN.exe

windows7-x64

a646cb4b5e...cN.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4cN
Size

82KB
Sample

241006-kpdlcswfmm
MD5

5c0d0687113b4863627a43034d3eeca0
SHA1

4ab3eaeb92de1afe658a28fc6afc5c8d0871633b
SHA256

a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4c
SHA512

4332589789a80936eeb287867d96b945cbb593dfde45873b7ca345fbc49a8f0ab0c3ba59291f4327b9f6763b718a0c249000f1d1cf2ff30f78dc6b5f30a1f317
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QF:ymb3NkkiQ3mdBjFIIp9L9QrrA8K

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4cN.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4cN.exe

Resource

win10v2004-20240802-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4cN
- Size
  
  82KB
- MD5
  
  5c0d0687113b4863627a43034d3eeca0
- SHA1
  
  4ab3eaeb92de1afe658a28fc6afc5c8d0871633b
- SHA256
  
  a646cb4b5e2f58cbcb83b7bf29201da77f225aeddbc4d88c3aa9c912139e6c4c
- SHA512
  
  4332589789a80936eeb287867d96b945cbb593dfde45873b7ca345fbc49a8f0ab0c3ba59291f4327b9f6763b718a0c249000f1d1cf2ff30f78dc6b5f30a1f317
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QF:ymb3NkkiQ3mdBjFIIp9L9QrrA8K
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy