blackmoon | 96eb2791aee3449753c961e88253fa9d9dd36323273ca583f4b39f7138a26ce6

General

Target

96eb2791aee3449753c961e88253fa9d9dd36323273ca583f4b39f7138a26ce6N.exe
Size

456KB
Sample

250217-ca3ypswlfy
MD5

f589eb9509db3c16c700b886d3b6ce10
SHA1

56c7350265acfa72f0d87cea4d5d729c4f5e4abb
SHA256

96eb2791aee3449753c961e88253fa9d9dd36323273ca583f4b39f7138a26ce6
SHA512

164617bb28a90a9d851973f75ffa738b696e53d839e84823ca4ceac05a50dbed6c7078dda540aaa6c10522f896c927d8f23df97a16d53137b38ec8087997300e
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeH:q7Tc2NYHUrAwfMp3CDH

Score

10^/10

Malware Config

Targets

- Target
  
  96eb2791aee3449753c961e88253fa9d9dd36323273ca583f4b39f7138a26ce6N.exe
- Size
  
  456KB
- MD5
  
  f589eb9509db3c16c700b886d3b6ce10
- SHA1
  
  56c7350265acfa72f0d87cea4d5d729c4f5e4abb
- SHA256
  
  96eb2791aee3449753c961e88253fa9d9dd36323273ca583f4b39f7138a26ce6
- SHA512
  
  164617bb28a90a9d851973f75ffa738b696e53d839e84823ca4ceac05a50dbed6c7078dda540aaa6c10522f896c927d8f23df97a16d53137b38ec8087997300e
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeH:q7Tc2NYHUrAwfMp3CDH
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2