blackmoon | 5630ddf8355256bc6d3f08183202285bbe8bcc7d5d09077c9450e3788409068f

General

Target

5630ddf8355256bc6d3f08183202285bbe8bcc7d5d09077c9450e3788409068fN.exe
Size

455KB
Sample

250217-ca5saswlcq
MD5

b946c9fde04d2972df7cec96d3350490
SHA1

bc435d730e93b39a1cffa7c79b872a83066c45a9
SHA256

5630ddf8355256bc6d3f08183202285bbe8bcc7d5d09077c9450e3788409068f
SHA512

76de7f854700b73c6acf0ae4aa0be1ec4864a82acf1973c7619ee8ba4f01ea494041399b1c4acbd849df5ff2ce928298839eea745bbee986b23620217b8d7c2a
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeL:q7Tc2NYHUrAwfMp3CDL

Score

10^/10

Malware Config

Targets

- Target
  
  5630ddf8355256bc6d3f08183202285bbe8bcc7d5d09077c9450e3788409068fN.exe
- Size
  
  455KB
- MD5
  
  b946c9fde04d2972df7cec96d3350490
- SHA1
  
  bc435d730e93b39a1cffa7c79b872a83066c45a9
- SHA256
  
  5630ddf8355256bc6d3f08183202285bbe8bcc7d5d09077c9450e3788409068f
- SHA512
  
  76de7f854700b73c6acf0ae4aa0be1ec4864a82acf1973c7619ee8ba4f01ea494041399b1c4acbd849df5ff2ce928298839eea745bbee986b23620217b8d7c2a
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeL:q7Tc2NYHUrAwfMp3CDL
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2