blackmoon | 202e851bde11b2cb6bc86c03a0ab3b41e2665db0d7d40b5c7a03820d37eac12b

General

Target

202e851bde11b2cb6bc86c03a0ab3b41e2665db0d7d40b5c7a03820d37eac12b.exe
Size

454KB
Sample

250217-b98gsswlev
MD5

a7459ae1369a322f944213d58b11912e
SHA1

03231034d857cb237f15c15a5673c407239c43cf
SHA256

202e851bde11b2cb6bc86c03a0ab3b41e2665db0d7d40b5c7a03820d37eac12b
SHA512

a9f385367aef530c51c00c7da365c355e66838d119b9209c75823a84f6824b26768a32b0959837117babe72b4c40866aa62f2ce44014f1ae15267acc8b047f54
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeN:q7Tc2NYHUrAwfMp3CDN

Score

10^/10

Malware Config

Targets

- Target
  
  202e851bde11b2cb6bc86c03a0ab3b41e2665db0d7d40b5c7a03820d37eac12b.exe
- Size
  
  454KB
- MD5
  
  a7459ae1369a322f944213d58b11912e
- SHA1
  
  03231034d857cb237f15c15a5673c407239c43cf
- SHA256
  
  202e851bde11b2cb6bc86c03a0ab3b41e2665db0d7d40b5c7a03820d37eac12b
- SHA512
  
  a9f385367aef530c51c00c7da365c355e66838d119b9209c75823a84f6824b26768a32b0959837117babe72b4c40866aa62f2ce44014f1ae15267acc8b047f54
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeN:q7Tc2NYHUrAwfMp3CDN
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2