Overview

overview

10

Static

static

3

60fa376552...83.exe

windows7-x64

10

60fa376552...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60fa3765523a8ac6cc067363d249cc07e3123a71ced329a5dfcb2b1c8b6ee583.exe

  • Size

    454KB

  • Sample

    241226-f9amzsxphy

  • MD5

    f1426cf9be092473495d8cc67f88a96d

  • SHA1

    010a9792407b5d3aedfae8b1b369532746abe0b4

  • SHA256

    60fa3765523a8ac6cc067363d249cc07e3123a71ced329a5dfcb2b1c8b6ee583

  • SHA512

    443c001f7a7366a48d8dc0cb77128e56cd5b8dd3b849c872cb5737c319e29e2948dd707818c75d85f21ac7d69703ce69dbf70b47ab6b455d8ee81d4fa0af93bc

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbep:q7Tc2NYHUrAwfMp3CDp

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      60fa3765523a8ac6cc067363d249cc07e3123a71ced329a5dfcb2b1c8b6ee583.exe

    • Size

      454KB

    • MD5

      f1426cf9be092473495d8cc67f88a96d

    • SHA1

      010a9792407b5d3aedfae8b1b369532746abe0b4

    • SHA256

      60fa3765523a8ac6cc067363d249cc07e3123a71ced329a5dfcb2b1c8b6ee583

    • SHA512

      443c001f7a7366a48d8dc0cb77128e56cd5b8dd3b849c872cb5737c319e29e2948dd707818c75d85f21ac7d69703ce69dbf70b47ab6b455d8ee81d4fa0af93bc

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbep:q7Tc2NYHUrAwfMp3CDp

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks