blackmoon | dd9d9054e62abd4bbc1637d61408cd00244f83e04e4e26b65ec3a69a3878dc8d

General

Target

dd9d9054e62abd4bbc1637d61408cd00244f83e04e4e26b65ec3a69a3878dc8d.exe
Size

334KB
Sample

250217-cbd1zawlgw
MD5

f7eb66ec4045d00cbe8cca55356553fa
SHA1

8d91d463903bdd4ade94360c926e2212d8c9dca0
SHA256

dd9d9054e62abd4bbc1637d61408cd00244f83e04e4e26b65ec3a69a3878dc8d
SHA512

b2e96a2efe0a7a9467bd2629e88f73aa188fb1f0ed06521c47ce1c837ac3b3123175ec4a550eb2a2bec122df768d229687da106bc4082ccb2e3d5221d93d4c24
SSDEEP

6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbeJ:R4wFHoSHYHUrAwfMp3CDJ

Score

10^/10

Malware Config

Targets

- Target
  
  dd9d9054e62abd4bbc1637d61408cd00244f83e04e4e26b65ec3a69a3878dc8d.exe
- Size
  
  334KB
- MD5
  
  f7eb66ec4045d00cbe8cca55356553fa
- SHA1
  
  8d91d463903bdd4ade94360c926e2212d8c9dca0
- SHA256
  
  dd9d9054e62abd4bbc1637d61408cd00244f83e04e4e26b65ec3a69a3878dc8d
- SHA512
  
  b2e96a2efe0a7a9467bd2629e88f73aa188fb1f0ed06521c47ce1c837ac3b3123175ec4a550eb2a2bec122df768d229687da106bc4082ccb2e3d5221d93d4c24
- SSDEEP
  
  6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbeJ:R4wFHoSHYHUrAwfMp3CDJ
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2