Overview

overview

10

Static

static

3

d71b7c9323...fd.exe

windows7-x64

10

d71b7c9323...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d71b7c9323776d6d3cdf5ef3b0d4ecb7a0584d114a9604aa9f009600578e22fd

  • Size

    1.9MB

  • Sample

    241217-xhax4swjek

  • MD5

    306a5adb9f2c70d05e2f96be06481797

  • SHA1

    074254f87ff5c35e1b545dd1c5e3b6d3b9cce123

  • SHA256

    d71b7c9323776d6d3cdf5ef3b0d4ecb7a0584d114a9604aa9f009600578e22fd

  • SHA512

    70840074cb59a96ad92a0264d5424673cea257f8b1fe2ef93ead75e2d03ea290d32475322d778572c702ae93a86f264395584a861b2dcfe3394bf8121fa58565

  • SSDEEP

    49152:pORZLJf3dG+1H7C56aMVfCUhGsRm+4PAG:KZ53dG+1b66aUh/Rm+cP

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      d71b7c9323776d6d3cdf5ef3b0d4ecb7a0584d114a9604aa9f009600578e22fd

    • Size

      1.9MB

    • MD5

      306a5adb9f2c70d05e2f96be06481797

    • SHA1

      074254f87ff5c35e1b545dd1c5e3b6d3b9cce123

    • SHA256

      d71b7c9323776d6d3cdf5ef3b0d4ecb7a0584d114a9604aa9f009600578e22fd

    • SHA512

      70840074cb59a96ad92a0264d5424673cea257f8b1fe2ef93ead75e2d03ea290d32475322d778572c702ae93a86f264395584a861b2dcfe3394bf8121fa58565

    • SSDEEP

      49152:pORZLJf3dG+1H7C56aMVfCUhGsRm+4PAG:KZ53dG+1b66aUh/Rm+cP

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks