blackmoon | 3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b | Triage

Submit
Reports

Overview

overview

Static

static

3

3c4f9104fa...4b.exe

windows7-x64

3c4f9104fa...4b.exe

windows10-2004-x64

Sharing

General

Target

3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b.exe
Size

454KB
Sample

241225-t7smnsymhw
MD5

4a708c5f273a8507099a1ac209af1405
SHA1

cd746a14c31b2543c2bf46c1edce499b13e76f85
SHA256

3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b
SHA512

b2bbbc21a0777896976654489e4a3762fd9fd50c43ce6a540fbb1c97671584a3aaae3d5da7f6e446217fc9d610ac78c41201fc4141354831f4233af85b2e9e86
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbey:q7Tc2NYHUrAwfMp3CDy

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b.exe
- Size
  
  454KB
- MD5
  
  4a708c5f273a8507099a1ac209af1405
- SHA1
  
  cd746a14c31b2543c2bf46c1edce499b13e76f85
- SHA256
  
  3c4f9104fa72e4b33730906c9de6020a1f5f26df66af099c5d0bb24cac06fe4b
- SHA512
  
  b2bbbc21a0777896976654489e4a3762fd9fd50c43ce6a540fbb1c97671584a3aaae3d5da7f6e446217fc9d610ac78c41201fc4141354831f4233af85b2e9e86
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbey:q7Tc2NYHUrAwfMp3CDy
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2024

Terms | Privacy