blackmoon | fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0 | Triage

Submit
Reports

Overview

overview

Static

static

fca7fee6df...c0.exe

windows7-x64

fca7fee6df...c0.exe

windows10-2004-x64

Sharing

General

Target

fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0
Size

4.7MB
Sample

241219-vtg5fswnfx
MD5

064ec745258baae48600c3afc1c559eb
SHA1

90b57d435b9fd2446a6dd5cecc57b14989913863
SHA256

fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0
SHA512

58e9c58e1acf7383246307413ede6f486b8c94e771717ae91d190da28b2e031df7e603a4439a19ef71fb85547ba64793fbbb9a7cb44efc9094ca1aa4533fc457
SSDEEP

98304:BspGldLMfhKhKFssvVEFFNPfmTt4yXBCPlMIAgW4BzSWrSEDGrgoKDv7uQ+eJ:BXdOUhqjvurmROWINW4xNFqrgZb7uK

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0
- Size
  
  4.7MB
- MD5
  
  064ec745258baae48600c3afc1c559eb
- SHA1
  
  90b57d435b9fd2446a6dd5cecc57b14989913863
- SHA256
  
  fca7fee6df6577aa48a77c54e216385d0f06763a9bee95233db00b5a5f6834c0
- SHA512
  
  58e9c58e1acf7383246307413ede6f486b8c94e771717ae91d190da28b2e031df7e603a4439a19ef71fb85547ba64793fbbb9a7cb44efc9094ca1aa4533fc457
- SSDEEP
  
  98304:BspGldLMfhKhKFssvVEFFNPfmTt4yXBCPlMIAgW4BzSWrSEDGrgoKDv7uQ+eJ:BXdOUhqjvurmROWINW4xNFqrgZb7uK
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy