blackmoon | 280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c | Triage

Submit
Reports

Overview

overview

Static

static

3

280c70f2fd...9c.exe

windows7-x64

280c70f2fd...9c.exe

windows10-2004-x64

Sharing

General

Target

280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c
Size

456KB
Sample

241228-zq6qvssmgk
MD5

403bc20881046249e8ae7dd489de5ee0
SHA1

e144f116da9ac6d84affb50203ed6c36c7f6be86
SHA256

280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c
SHA512

77f608c4c8ffa713b6011f4372fe3e5cd237054a73a5b8b4902af131fc3f635deb7d089196280bc8c5212cb2bb5942859068b81fbc3e1ad43f62f3caffa8a743
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRm:q7Tc2NYHUrAwfMp3CDRm

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c
- Size
  
  456KB
- MD5
  
  403bc20881046249e8ae7dd489de5ee0
- SHA1
  
  e144f116da9ac6d84affb50203ed6c36c7f6be86
- SHA256
  
  280c70f2fd22e21349e4a5ae01548fbb18c4a0c1a4ee7ad5021f55b21282699c
- SHA512
  
  77f608c4c8ffa713b6011f4372fe3e5cd237054a73a5b8b4902af131fc3f635deb7d089196280bc8c5212cb2bb5942859068b81fbc3e1ad43f62f3caffa8a743
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRm:q7Tc2NYHUrAwfMp3CDRm
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy