blackmoon | 39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243d | Triage

Submit
Reports

Overview

overview

Static

static

3

39923c59d2...dN.exe

windows7-x64

39923c59d2...dN.exe

windows10-2004-x64

Sharing

General

Target

39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243dN.exe
Size

454KB
Sample

241226-s15szsynfw
MD5

64bd3ba7a3804ae3148aee576cf84150
SHA1

544f7f843f7877748293b23295ae94316508fd68
SHA256

39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243d
SHA512

8b631f99e6ce55ef8d0c4bee4ff3c963433a241adb43091fc5d62f71cdbb1770a24fddf83bdfa3162bb678b7eda0310e6b8fd6e089f1e08f4bda60a3c6f8848a
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeB:q7Tc2NYHUrAwfMp3CDB

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243dN.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243dN.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243dN.exe
- Size
  
  454KB
- MD5
  
  64bd3ba7a3804ae3148aee576cf84150
- SHA1
  
  544f7f843f7877748293b23295ae94316508fd68
- SHA256
  
  39923c59d2aff7d1f5dda03ecf3f014cd5a87e26577f7009671cc9d274c8243d
- SHA512
  
  8b631f99e6ce55ef8d0c4bee4ff3c963433a241adb43091fc5d62f71cdbb1770a24fddf83bdfa3162bb678b7eda0310e6b8fd6e089f1e08f4bda60a3c6f8848a
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeB:q7Tc2NYHUrAwfMp3CDB
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy