Overview

overview

10

Static

static

3

e090f8ec3f...d8.exe

windows7-x64

10

e090f8ec3f...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e090f8ec3f8ab9ed5418d366424c1f5c4c0eae3d7156954ad54f5ffd908ed8d8.exe

  • Size

    456KB

  • Sample

    250120-kzelea1rhq

  • MD5

    32e1140843a49039d3ec5ddcf59f863f

  • SHA1

    7310c203f93cf5ec03e248c95301c765c94d0af8

  • SHA256

    e090f8ec3f8ab9ed5418d366424c1f5c4c0eae3d7156954ad54f5ffd908ed8d8

  • SHA512

    883812f676d582ec24b20b45f99f89f5349e8d1d0ffcd4a974d99d96c949a3048d371fc89c6ebdd1c1f947bf51213964729052d9fd55d3f75d0dbd0623b1bd8a

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeT6:q7Tc2NYHUrAwfMp3CDu

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      e090f8ec3f8ab9ed5418d366424c1f5c4c0eae3d7156954ad54f5ffd908ed8d8.exe

    • Size

      456KB

    • MD5

      32e1140843a49039d3ec5ddcf59f863f

    • SHA1

      7310c203f93cf5ec03e248c95301c765c94d0af8

    • SHA256

      e090f8ec3f8ab9ed5418d366424c1f5c4c0eae3d7156954ad54f5ffd908ed8d8

    • SHA512

      883812f676d582ec24b20b45f99f89f5349e8d1d0ffcd4a974d99d96c949a3048d371fc89c6ebdd1c1f947bf51213964729052d9fd55d3f75d0dbd0623b1bd8a

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeT6:q7Tc2NYHUrAwfMp3CDu

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks