blackmoon | 771e570ff860f052c77dee500ac599aa757a4c4b449b96e3bbc72e6731001328

General

Target

771e570ff860f052c77dee500ac599aa757a4c4b449b96e3bbc72e6731001328.exe
Size

455KB
Sample

250217-ca921swlfz
MD5

8c8771ee046e6fdbdf407281df74acca
SHA1

844ba50b1bb322353c031d17789baa02d192e3ec
SHA256

771e570ff860f052c77dee500ac599aa757a4c4b449b96e3bbc72e6731001328
SHA512

4908e895e81786932d673dc3d0df03f4a57e555ed0ed0619b2f7a1176e85ce0342f7d7979f87fd3c8f2203873c133870a68341e6cbbe66b8ac3ea8b1087ab69b
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbek:q7Tc2NYHUrAwfMp3CDk

Score

10^/10

Malware Config

Targets

- Target
  
  771e570ff860f052c77dee500ac599aa757a4c4b449b96e3bbc72e6731001328.exe
- Size
  
  455KB
- MD5
  
  8c8771ee046e6fdbdf407281df74acca
- SHA1
  
  844ba50b1bb322353c031d17789baa02d192e3ec
- SHA256
  
  771e570ff860f052c77dee500ac599aa757a4c4b449b96e3bbc72e6731001328
- SHA512
  
  4908e895e81786932d673dc3d0df03f4a57e555ed0ed0619b2f7a1176e85ce0342f7d7979f87fd3c8f2203873c133870a68341e6cbbe66b8ac3ea8b1087ab69b
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbek:q7Tc2NYHUrAwfMp3CDk
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2