blackmoon | 344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4 | Triage

Submit
Reports

Overview

overview

Static

static

5

344a23878d...c4.exe

windows7-x64

344a23878d...c4.exe

windows10-2004-x64

Sharing

General

Target

344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4.exe
Size

97KB
Sample

241222-gd28sswkcx
MD5

56600ed41f70a29baa3506d7f603240f
SHA1

2471b2d43a54198af4a8b81147db57cf7d2a5d71
SHA256

344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4
SHA512

69ca518c0620f4851d1040df8571a888fc853a07997fb43407c7ccfff813447a0d2e9b794e357e444acd55ef633beb4db8010db85a76cc99725388c3aee2fe82
SSDEEP

3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzgRb:8cm4FmowdHoSgWrXUgN

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4.exe
- Size
  
  97KB
- MD5
  
  56600ed41f70a29baa3506d7f603240f
- SHA1
  
  2471b2d43a54198af4a8b81147db57cf7d2a5d71
- SHA256
  
  344a23878d6d39e6dfb79aa27ae724b110c9eaf19546d24ce42efc2c6542bdc4
- SHA512
  
  69ca518c0620f4851d1040df8571a888fc853a07997fb43407c7ccfff813447a0d2e9b794e357e444acd55ef633beb4db8010db85a76cc99725388c3aee2fe82
- SSDEEP
  
  3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzgRb:8cm4FmowdHoSgWrXUgN
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2024

Terms | Privacy