blackmoon | 1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a | Triage

Submit
Reports

Overview

overview

Static

static

3

1a7cf2f137...8a.exe

windows7-x64

1a7cf2f137...8a.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a
Size

80KB
Sample

241013-xz1vvstdkd
MD5

18a083de578acf1ded4a1ff218d020c6
SHA1

a4d4abcf75e4cd7be4b9824fafb2d1be3637b3fc
SHA256

1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a
SHA512

266b302785c910b99de8752519d888bd1eb4c3a0c427a98e31caf0d558442452cc6d021fd3ada1652df4ce1f11fc208c6980a32f01b8873a231a936b11eb22f6
SSDEEP

1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yehh:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4Kh

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a
- Size
  
  80KB
- MD5
  
  18a083de578acf1ded4a1ff218d020c6
- SHA1
  
  a4d4abcf75e4cd7be4b9824fafb2d1be3637b3fc
- SHA256
  
  1a7cf2f137396a9737572b4501374ff5fb8240c0b7dad957149d4c506081368a
- SHA512
  
  266b302785c910b99de8752519d888bd1eb4c3a0c427a98e31caf0d558442452cc6d021fd3ada1652df4ce1f11fc208c6980a32f01b8873a231a936b11eb22f6
- SSDEEP
  
  1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yehh:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4Kh
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy