Overview

overview

10

Static

static

5

73c4963606...72.exe

windows7-x64

10

73c4963606...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73c4963606d4e9d3dcff1cd55d0e7aa19582a623dfe47edb403493ace7250e72.exe

  • Size

    87KB

  • Sample

    241124-k3dhhssrgt

  • MD5

    4b7f3720bb32bfbb1914aafd7419cdf0

  • SHA1

    c0f28c08f8201d51e2ef53c04586785589249a79

  • SHA256

    73c4963606d4e9d3dcff1cd55d0e7aa19582a623dfe47edb403493ace7250e72

  • SHA512

    01bfe54325acad87ed8a78f1ab2d1bd62adbc4c38d1ceb179be9e060f1e057b474068ae0d101f9c85b8e0d12fd58fdaad8db7b9257c137bcf24b321e4429f1eb

  • SSDEEP

    1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy82F13w1rCJtzGeKuO+mqizpPubYDEzfY:xhOmTsF93UYfwC6GIout03LzuuOlzpPf

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      73c4963606d4e9d3dcff1cd55d0e7aa19582a623dfe47edb403493ace7250e72.exe

    • Size

      87KB

    • MD5

      4b7f3720bb32bfbb1914aafd7419cdf0

    • SHA1

      c0f28c08f8201d51e2ef53c04586785589249a79

    • SHA256

      73c4963606d4e9d3dcff1cd55d0e7aa19582a623dfe47edb403493ace7250e72

    • SHA512

      01bfe54325acad87ed8a78f1ab2d1bd62adbc4c38d1ceb179be9e060f1e057b474068ae0d101f9c85b8e0d12fd58fdaad8db7b9257c137bcf24b321e4429f1eb

    • SSDEEP

      1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy82F13w1rCJtzGeKuO+mqizpPubYDEzfY:xhOmTsF93UYfwC6GIout03LzuuOlzpPf

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks