Overview

overview

10

Static

static

10

2024-12-28...id.exe

windows7-x64

10

2024-12-28...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-28_3fda6d3e7fb603309586629d7e1a2325_hijackloader_icedid

  • Size

    3.0MB

  • Sample

    241228-b62vvatnhj

  • MD5

    3fda6d3e7fb603309586629d7e1a2325

  • SHA1

    a71324b56231ffb97e282b829ca2ccf99fbb3f85

  • SHA256

    ae283308793708e63f8220a01ec88c1124864462c8ead58d186d934d61d74110

  • SHA512

    4f42c065144d3571c02cc5442bf7ad8b7add2c082c512572dcc3a0804b1f5609b28ae440db1023d30d9aff8b77778686bfa1955250d7a112747fd31083b403fd

  • SSDEEP

    49152:A04DpUiMf8rHposwJepz53wJWqon2N2pA/AV/AV1:sCii81osRBEk2N11

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-28_3fda6d3e7fb603309586629d7e1a2325_hijackloader_icedid

    • Size

      3.0MB

    • MD5

      3fda6d3e7fb603309586629d7e1a2325

    • SHA1

      a71324b56231ffb97e282b829ca2ccf99fbb3f85

    • SHA256

      ae283308793708e63f8220a01ec88c1124864462c8ead58d186d934d61d74110

    • SHA512

      4f42c065144d3571c02cc5442bf7ad8b7add2c082c512572dcc3a0804b1f5609b28ae440db1023d30d9aff8b77778686bfa1955250d7a112747fd31083b403fd

    • SSDEEP

      49152:A04DpUiMf8rHposwJepz53wJWqon2N2pA/AV/AV1:sCii81osRBEk2N11

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks