blackmoon | 6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3 | Triage

Submit
Reports

Overview

overview

Static

static

7

6d516ddb0c...d3.dll

windows7-x64

6d516ddb0c...d3.dll

windows10-2004-x64

Sharing

General

Target

6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3
Size

4.1MB
Sample

241220-yahtessqhr
MD5

d9501fb2216a7e083367786a19a7062d
SHA1

33a161685b85117e02c7cfdc1c3bd539bb3c0f40
SHA256

6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3
SHA512

d2af8f2d92104027388ea95a4c1d4a24ce264d9a5f7196650118b593c6ab82d49885cfbcfb523943a988a8382de68bdefd3f93aeb9d12269c109df5f09c186f5
SSDEEP

98304:pT31c8XZrPwZ/ikqFmxsppzve1Da0BepkWX85bTH/eDXxor6p:pT1cyrP44g6lvmU6WX8ZTHWr

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3.dll

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3.dll

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3
- Size
  
  4.1MB
- MD5
  
  d9501fb2216a7e083367786a19a7062d
- SHA1
  
  33a161685b85117e02c7cfdc1c3bd539bb3c0f40
- SHA256
  
  6d516ddb0c8ff5854ba4d54958eebd99d3e2ae9ff0d23ca16a6dde3140c083d3
- SHA512
  
  d2af8f2d92104027388ea95a4c1d4a24ce264d9a5f7196650118b593c6ab82d49885cfbcfb523943a988a8382de68bdefd3f93aeb9d12269c109df5f09c186f5
- SSDEEP
  
  98304:pT31c8XZrPwZ/ikqFmxsppzve1Da0BepkWX85bTH/eDXxor6p:pT1cyrP44g6lvmU6WX8ZTHWr
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2024

Terms | Privacy