Overview

overview

10

Static

static

10

e7a3e19805...3N.exe

windows7-x64

10

e7a3e19805...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7a3e19805a91aa43c6f8f51f6876ce519ecdd87f7d744dbff4d5bf99e44aba3N.exe

  • Size

    2.1MB

  • Sample

    241130-hbzkka1qen

  • MD5

    a2df606598320e14f6e722ff23b9dfb0

  • SHA1

    3bd628a57b717a78148cce337b4b2edcd693598c

  • SHA256

    e7a3e19805a91aa43c6f8f51f6876ce519ecdd87f7d744dbff4d5bf99e44aba3

  • SHA512

    bf243d8c0246c7c928e645a02e5f94c075ec41599d4b8100ea45d8cc420268cb4d84b15f82a030719f064a01a594457e9e7a5d3558e59da5bcfcca800efc812b

  • SSDEEP

    24576:3qzIIUgC8d36kLBXlnB8j7v5Ta+hLLQ20JmXSeWwa1oWJQjk0svTS/PPsbb1hwR/:3sCOfN6X5tLLQTg20ITS/PPs/1k/

Score
10/10
blackmoonnjratbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      e7a3e19805a91aa43c6f8f51f6876ce519ecdd87f7d744dbff4d5bf99e44aba3N.exe

    • Size

      2.1MB

    • MD5

      a2df606598320e14f6e722ff23b9dfb0

    • SHA1

      3bd628a57b717a78148cce337b4b2edcd693598c

    • SHA256

      e7a3e19805a91aa43c6f8f51f6876ce519ecdd87f7d744dbff4d5bf99e44aba3

    • SHA512

      bf243d8c0246c7c928e645a02e5f94c075ec41599d4b8100ea45d8cc420268cb4d84b15f82a030719f064a01a594457e9e7a5d3558e59da5bcfcca800efc812b

    • SSDEEP

      24576:3qzIIUgC8d36kLBXlnB8j7v5Ta+hLLQ20JmXSeWwa1oWJQjk0svTS/PPsbb1hwR/:3sCOfN6X5tLLQTg20ITS/PPs/1k/

    Score
    10/10
    blackmoonbankerdiscoverytrojanupxnjrat

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Njrat family

      njrat

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks