blackmoon | e19ea25740dd4d76c979b87d1c92715497beb9a1f5e5b21791e46c04144e0bd4

General

Target

e19ea25740dd4d76c979b87d1c92715497beb9a1f5e5b21791e46c04144e0bd4N.exe
Size

458KB
Sample

250217-ca85qawldj
MD5

d0efe12bb1337607cba903280659aa70
SHA1

7cce1a0c110ec286b3cac1405cf4ffaa0284ced1
SHA256

e19ea25740dd4d76c979b87d1c92715497beb9a1f5e5b21791e46c04144e0bd4
SHA512

5c39ac6b2cc1fdb3fc0141424db7362c4800e39951a0a75f7878c458776afc7c48ee91ddbf7ef6120d5edd57b591e5b91c3f09317f3ddc29e770382f4630c7bf
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeR2s:q7Tc2NYHUrAwfMp3CDR2s

Score

10^/10

Malware Config

Targets

- Target
  
  e19ea25740dd4d76c979b87d1c92715497beb9a1f5e5b21791e46c04144e0bd4N.exe
- Size
  
  458KB
- MD5
  
  d0efe12bb1337607cba903280659aa70
- SHA1
  
  7cce1a0c110ec286b3cac1405cf4ffaa0284ced1
- SHA256
  
  e19ea25740dd4d76c979b87d1c92715497beb9a1f5e5b21791e46c04144e0bd4
- SHA512
  
  5c39ac6b2cc1fdb3fc0141424db7362c4800e39951a0a75f7878c458776afc7c48ee91ddbf7ef6120d5edd57b591e5b91c3f09317f3ddc29e770382f4630c7bf
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeR2s:q7Tc2NYHUrAwfMp3CDR2s
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2