blackmoon | 1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840 | Triage

Submit
Reports

Overview

overview

Static

static

3

1912c906da...0N.exe

windows7-x64

1912c906da...0N.exe

windows10-2004-x64

Sharing

General

Target

1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840N.exe
Size

454KB
Sample

250120-k4yvvasjav
MD5

f505569a977511e07499723fa2c2d7f0
SHA1

9c53ac8fb2e2ff0fd38f31917391c336a24277fc
SHA256

1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840
SHA512

4edfe5afdec2ccb4de5460175f2e9beb022bb845ba3ad650f4689d22180fca4a3fd193a15a5b10dfdf4766cd90fee7203013ec25e712f2f6a22420b5422879fc
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbei:q7Tc2NYHUrAwfMp3CDi

Score

10^/10

blackmoon banker discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840N.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840N.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840N.exe
- Size
  
  454KB
- MD5
  
  f505569a977511e07499723fa2c2d7f0
- SHA1
  
  9c53ac8fb2e2ff0fd38f31917391c336a24277fc
- SHA256
  
  1912c906daf4a92d408612cc9add38d0c2e522d97218d9d34dc096b72f932840
- SHA512
  
  4edfe5afdec2ccb4de5460175f2e9beb022bb845ba3ad650f4689d22180fca4a3fd193a15a5b10dfdf4766cd90fee7203013ec25e712f2f6a22420b5422879fc
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbei:q7Tc2NYHUrAwfMp3CDi
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerdiscoverytrojanupx

behavioral2

blackmoonbankerdiscoverytrojanupx

© 2018-2025

Terms | Privacy