blackmoon | 3ec6e2506dca06e684667100b7f11af9c7dd7282ebae9c34eba4bece579a488d

General

Target

3ec6e2506dca06e684667100b7f11af9c7dd7282ebae9c34eba4bece579a488dN.exe
Size

333KB
Sample

250217-carknswlbr
MD5

12b0812d561b8b41993c786285236530
SHA1

977452b9d0577789c5827a4f9e2b785dcfc49f1d
SHA256

3ec6e2506dca06e684667100b7f11af9c7dd7282ebae9c34eba4bece579a488d
SHA512

dbf636812534bb625a8c3061ccd9a46b8af9f7771e9efac079bd3d6cd8a90eceb546bf75c0fb8f5150b5992cd5dd21da1053b41c53b1a471337b70ac8daa68f9
SSDEEP

6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbe+:R4wFHoSHYHUrAwfMp3CD+

Score

10^/10

Malware Config

Targets

- Target
  
  3ec6e2506dca06e684667100b7f11af9c7dd7282ebae9c34eba4bece579a488dN.exe
- Size
  
  333KB
- MD5
  
  12b0812d561b8b41993c786285236530
- SHA1
  
  977452b9d0577789c5827a4f9e2b785dcfc49f1d
- SHA256
  
  3ec6e2506dca06e684667100b7f11af9c7dd7282ebae9c34eba4bece579a488d
- SHA512
  
  dbf636812534bb625a8c3061ccd9a46b8af9f7771e9efac079bd3d6cd8a90eceb546bf75c0fb8f5150b5992cd5dd21da1053b41c53b1a471337b70ac8daa68f9
- SSDEEP
  
  6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbe+:R4wFHoSHYHUrAwfMp3CD+
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2