blackmoon | 430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

430172fab6...a7.exe

windows7-x64

430172fab6...a7.exe

windows10-2004-x64

Sharing

General

Target

430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7.exe
Size

452KB
Sample

241225-19nj3azqek
MD5

164431fb08b2464b7ea0d945fcadf177
SHA1

b71f8d1baf1290c144e8828446da026bd06ba393
SHA256

430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7
SHA512

7e9cd05094cd8fc19e6f81536daf4f5ad00622d21ffd1107dbc5071bef81c221a58a7e229b6f6c75b5a1bb8bafd4a6441bc979a899da31bb0009430c33c382d5
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeE:q7Tc2NYHUrAwfMp3CDE

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7.exe

Resource

win7-20241010-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7.exe
- Size
  
  452KB
- MD5
  
  164431fb08b2464b7ea0d945fcadf177
- SHA1
  
  b71f8d1baf1290c144e8828446da026bd06ba393
- SHA256
  
  430172fab613bc1c2d64c4dc1453aa7c74f48d6209d91da1bbae0330921960a7
- SHA512
  
  7e9cd05094cd8fc19e6f81536daf4f5ad00622d21ffd1107dbc5071bef81c221a58a7e229b6f6c75b5a1bb8bafd4a6441bc979a899da31bb0009430c33c382d5
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeE:q7Tc2NYHUrAwfMp3CDE
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.