blackmoon | eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4 | Triage

Submit
Reports

Overview

overview

Static

static

eeae7565e4...f4.dll

windows7-x64

eeae7565e4...f4.dll

windows10-2004-x64

Sharing

General

Target

eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4
Size

440KB
Sample

241221-sgsz3s1qbt
MD5

a57bc0f6299614486b61b74d28ff5821
SHA1

43359903adbab69ac1950a2cdbd9c57f57f3e19a
SHA256

eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4
SHA512

9f46e699bdf9069e96c6bee14ddb6348f5339ce1ca6420d77155900a486907c02f426b3ef805c10429b7389e00851e52c98a0bb66b7b32766acf0f3880b3fac2
SSDEEP

6144:9Oaxk4jn12paJcCOXtmAU/Xk+qpy+CuRydo90C:kaxk4jnSaJcCOXZU/U+qpyfuRyih

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4.dll

Resource

win7-20241023-en

blackmoon banker discovery trojan upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4.dll

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4
- Size
  
  440KB
- MD5
  
  a57bc0f6299614486b61b74d28ff5821
- SHA1
  
  43359903adbab69ac1950a2cdbd9c57f57f3e19a
- SHA256
  
  eeae7565e4b18298754cc0723eea0774798fe667f869d977e78448e8302464f4
- SHA512
  
  9f46e699bdf9069e96c6bee14ddb6348f5339ce1ca6420d77155900a486907c02f426b3ef805c10429b7389e00851e52c98a0bb66b7b32766acf0f3880b3fac2
- SSDEEP
  
  6144:9Oaxk4jn12paJcCOXtmAU/Xk+qpy+CuRydo90C:kaxk4jnSaJcCOXZU/U+qpyfuRyih
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Blocklisted process makes network request
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2024

Terms | Privacy