Overview

overview

10

Static

static

10

45ee6693f4...dN.exe

windows7-x64

10

45ee6693f4...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45ee6693f429120d248d587d46d8326eeb62c2cb4523fd0474cafe7a833cf43dN.exe

  • Size

    2.3MB

  • Sample

    241231-lrp8lsxkan

  • MD5

    c3e670b5f737cdb039065f85856a8b60

  • SHA1

    3d8f2b12d3771f76b72f14aff1184df81226b26b

  • SHA256

    45ee6693f429120d248d587d46d8326eeb62c2cb4523fd0474cafe7a833cf43d

  • SHA512

    4ee19a3cf9ed97b24ec07e7a8f6706ea16cecac55565f8731d66250ad1f3aa6206c5ea462b4f6521f08e089f22698714019210db1a545e3e6458944ba867f247

  • SSDEEP

    24576:3qzIIUgC8d36kLBXlnB8j7v5Ta+hLLQ20JmXSeWwa1oWJQjk0svTS/PPsbb1hwRV:3sCOfN6X5tLLQTg20ITS/PPs/1kS4ey

Score
10/10
blackmoonnjratbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      45ee6693f429120d248d587d46d8326eeb62c2cb4523fd0474cafe7a833cf43dN.exe

    • Size

      2.3MB

    • MD5

      c3e670b5f737cdb039065f85856a8b60

    • SHA1

      3d8f2b12d3771f76b72f14aff1184df81226b26b

    • SHA256

      45ee6693f429120d248d587d46d8326eeb62c2cb4523fd0474cafe7a833cf43d

    • SHA512

      4ee19a3cf9ed97b24ec07e7a8f6706ea16cecac55565f8731d66250ad1f3aa6206c5ea462b4f6521f08e089f22698714019210db1a545e3e6458944ba867f247

    • SSDEEP

      24576:3qzIIUgC8d36kLBXlnB8j7v5Ta+hLLQ20JmXSeWwa1oWJQjk0svTS/PPsbb1hwRV:3sCOfN6X5tLLQTg20ITS/PPs/1kS4ey

    Score
    10/10
    blackmoonnjratbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Njrat family

      njrat

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks