blackmoon | ebd8af92ff62b01bd96c587835de9e2d8863ef5e4d12b8e031ff8d6973754b7d

General

Target

2024-11-22_722b5820f98f75c2360b814ec4c3e916_mafia
Size

1.7MB
Sample

241122-p5tdza1kgy
MD5

722b5820f98f75c2360b814ec4c3e916
SHA1

6473c9cd1eb5a2f5afaba5cb8acf1164d5cab8b6
SHA256

ebd8af92ff62b01bd96c587835de9e2d8863ef5e4d12b8e031ff8d6973754b7d
SHA512

9b4a6eba4a5c261739cd738c33b9edc77829b9822867f985037383aabef305a532d105a7452f4519ff92bfb44d04ddbd225ea5d2ab367246284b619cd0e2633f
SSDEEP

49152:6+lYMoRzGVMOiMeGP0NaPNcp0sUPYu7UGHMke:RllylGcaepMAOsk

Score

10^/10

Malware Config

Targets

- Target
  
  2024-11-22_722b5820f98f75c2360b814ec4c3e916_mafia
- Size
  
  1.7MB
- MD5
  
  722b5820f98f75c2360b814ec4c3e916
- SHA1
  
  6473c9cd1eb5a2f5afaba5cb8acf1164d5cab8b6
- SHA256
  
  ebd8af92ff62b01bd96c587835de9e2d8863ef5e4d12b8e031ff8d6973754b7d
- SHA512
  
  9b4a6eba4a5c261739cd738c33b9edc77829b9822867f985037383aabef305a532d105a7452f4519ff92bfb44d04ddbd225ea5d2ab367246284b619cd0e2633f
- SSDEEP
  
  49152:6+lYMoRzGVMOiMeGP0NaPNcp0sUPYu7UGHMke:RllylGcaepMAOsk
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Drops startup file
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

ACProtect 1.3x - 1.4x DLL software

Drops startup file

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2