blackmoon | 54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2 | Triage

Submit
Reports

Overview

overview

Static

static

3

54d7363ec8...2N.exe

windows7-x64

54d7363ec8...2N.exe

windows10-2004-x64

Sharing

General

Target

54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2N.exe
Size

454KB
Sample

241226-d362hawjhy
MD5

1784a484f37c946ec7c82c7e4dd809d0
SHA1

4bacd79211427c1fea95fadb75e1133f937e6c40
SHA256

54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2
SHA512

83653061c8f75e196b49314a8b6ccd928da1bb65827162adebbcbbf94b9d705f25a0f252ad3f9c9d5294aa3a9fdbb9fd945407e35f4c272f65cd60715f2c314e
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeB:q7Tc2NYHUrAwfMp3CDB

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2N.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2N.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2N.exe
- Size
  
  454KB
- MD5
  
  1784a484f37c946ec7c82c7e4dd809d0
- SHA1
  
  4bacd79211427c1fea95fadb75e1133f937e6c40
- SHA256
  
  54d7363ec8556b4406c87bb95f44e1772c643884a65e761e54d423579651bef2
- SHA512
  
  83653061c8f75e196b49314a8b6ccd928da1bb65827162adebbcbbf94b9d705f25a0f252ad3f9c9d5294aa3a9fdbb9fd945407e35f4c272f65cd60715f2c314e
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeB:q7Tc2NYHUrAwfMp3CDB
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy