Overview

overview

10

Static

static

3

2024-12-22...id.exe

windows7-x64

10

2024-12-22...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-22_d7cedbe9725da823ca7e39a920acc1e9_icedid

  • Size

    1.9MB

  • Sample

    241222-ljpbcatjgn

  • MD5

    d7cedbe9725da823ca7e39a920acc1e9

  • SHA1

    3dc0aaeaa55d566a9983359fc5ff0e919b68f38c

  • SHA256

    b0b4ee6a44091ce7ae80d510198e911e1a3f2e6f7bbbedfb704c14b474cc4d9c

  • SHA512

    7a05c46db84935fe905d942066f8d0ed1916ca13f1d5cacf6f3d9dae4bfce4143d5d98222d7bdcdd0a14a6adf559c224b01daa8763d623d00b7279220e9b39cf

  • SSDEEP

    49152:oh8qLJf3dG+1l5ocaMGCfCUhGsRm+4PgG:Rq53dG+1foccUh/Rm+cv

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-22_d7cedbe9725da823ca7e39a920acc1e9_icedid

    • Size

      1.9MB

    • MD5

      d7cedbe9725da823ca7e39a920acc1e9

    • SHA1

      3dc0aaeaa55d566a9983359fc5ff0e919b68f38c

    • SHA256

      b0b4ee6a44091ce7ae80d510198e911e1a3f2e6f7bbbedfb704c14b474cc4d9c

    • SHA512

      7a05c46db84935fe905d942066f8d0ed1916ca13f1d5cacf6f3d9dae4bfce4143d5d98222d7bdcdd0a14a6adf559c224b01daa8763d623d00b7279220e9b39cf

    • SSDEEP

      49152:oh8qLJf3dG+1l5ocaMGCfCUhGsRm+4PgG:Rq53dG+1foccUh/Rm+cv

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks