blackmoon | fe3920099f8504b6b0104ba18333b6394d2506a55c54eb2d07f8f75909e99164

General

Target

fe3920099f8504b6b0104ba18333b6394d2506a55c54eb2d07f8f75909e99164N.exe
Size

455KB
Sample

250217-cbr8lawlg1
MD5

56ee92353094b022556c3962f0fa4360
SHA1

89443a7e2c606179002f83760c4f74a7b713faeb
SHA256

fe3920099f8504b6b0104ba18333b6394d2506a55c54eb2d07f8f75909e99164
SHA512

0d6f1ed434a5eb98e0af51ac9d94c41d630ae93dc03039049d428320faeb20db89f84c9a9b97183b20799917566443bd5849c16126195c6d7c7354f51b77c94b
SSDEEP

6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbetG:q7Tc2NYHUrAwfMp3CDtG

Score

10^/10

Malware Config

Targets

- Target
  
  fe3920099f8504b6b0104ba18333b6394d2506a55c54eb2d07f8f75909e99164N.exe
- Size
  
  455KB
- MD5
  
  56ee92353094b022556c3962f0fa4360
- SHA1
  
  89443a7e2c606179002f83760c4f74a7b713faeb
- SHA256
  
  fe3920099f8504b6b0104ba18333b6394d2506a55c54eb2d07f8f75909e99164
- SHA512
  
  0d6f1ed434a5eb98e0af51ac9d94c41d630ae93dc03039049d428320faeb20db89f84c9a9b97183b20799917566443bd5849c16126195c6d7c7354f51b77c94b
- SSDEEP
  
  6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbetG:q7Tc2NYHUrAwfMp3CDtG
Score

10^/10

blackmoon banker discovery trojan upx
- Blackmoon family
  blackmoon
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Downloads MZ/PE file
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Blackmoon family

Blackmoon, KrBanker

Detect Blackmoon payload

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2