blackmoon | cbb71cc1c961199e1976519bbe2e49d69c1d47f80bf10c2a6c8b223aeded46e3

General

Target

cbb71cc1c961199e1976519bbe2e49d69c1d47f80bf10c2a6c8b223aeded46e3.exe
Size

459KB
Sample

250217-cavx4awlck
MD5

53a30bdfc67d442f745d6c4fbc90757c
SHA1

8187848833310f7b427b1acfb91bf746d0cb075a
SHA256

cbb71cc1c961199e1976519bbe2e49d69c1d47f80bf10c2a6c8b223aeded46e3
SHA512

2bcf34417d69dbc583350d25b1425d067f9d3443d1724ecefb23bf236adfef247f3c48c15229a255d0b8828db8684133a323e3f4339e6ca687ccba10a621feb5
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRE:q7Tc2NYHUrAwfMp3CDRE

Score

10^/10

Malware Config

Targets

- Target
  
  cbb71cc1c961199e1976519bbe2e49d69c1d47f80bf10c2a6c8b223aeded46e3.exe
- Size
  
  459KB
- MD5
  
  53a30bdfc67d442f745d6c4fbc90757c
- SHA1
  
  8187848833310f7b427b1acfb91bf746d0cb075a
- SHA256
  
  cbb71cc1c961199e1976519bbe2e49d69c1d47f80bf10c2a6c8b223aeded46e3
- SHA512
  
  2bcf34417d69dbc583350d25b1425d067f9d3443d1724ecefb23bf236adfef247f3c48c15229a255d0b8828db8684133a323e3f4339e6ca687ccba10a621feb5
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRE:q7Tc2NYHUrAwfMp3CDRE
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2