blackmoon | 7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef | Triage

Submit
Reports

Overview

overview

Static

static

7db241aebc...ef.exe

windows7-x64

7db241aebc...ef.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef
Size

2.4MB
Sample

241009-vqvalstgjc
MD5

db2b3de7653289b73daceea82f7a9885
SHA1

e1ea2c66b43cce3f5041518154c6d5845cd5f8fe
SHA256

7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef
SHA512

7d1381402a16b47b6b4777e2584864a1aa9aff895b97d61728752bf013b7423d44f534d909693df348a829b397dd42ae3323c9a07e3b968e44a199a1fddd84e2
SSDEEP

49152:q7jJjnl9vGhxehGbzzHsPl4/P69BTnh6F8sDGBv4zgoIuVMy:SjJrDvUHst7BTh6F8iGBYgbuV/

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef
- Size
  
  2.4MB
- MD5
  
  db2b3de7653289b73daceea82f7a9885
- SHA1
  
  e1ea2c66b43cce3f5041518154c6d5845cd5f8fe
- SHA256
  
  7db241aebcab9d3eb19c100dcee414556a6b81636e60bf3a16246743d2880aef
- SHA512
  
  7d1381402a16b47b6b4777e2584864a1aa9aff895b97d61728752bf013b7423d44f534d909693df348a829b397dd42ae3323c9a07e3b968e44a199a1fddd84e2
- SSDEEP
  
  49152:q7jJjnl9vGhxehGbzzHsPl4/P69BTnh6F8sDGBv4zgoIuVMy:SjJrDvUHst7BTh6F8iGBYgbuV/
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy