Overview

overview

10

Static

static

3

64725e792f...KI.exe

windows7-x64

10

64725e792f...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    64725e792f6176beab987222eb059740_NEIKI

  • Size

    383KB

  • Sample

    240508-1h9m8agh6z

  • MD5

    64725e792f6176beab987222eb059740

  • SHA1

    ecbd6e4da8f81b8bdf54f0a52b217142ee483712

  • SHA256

    b22c7dc8d9edd55b3a64fb9b97f284647fcec980e42b04ead1a1ceb5073dcf79

  • SHA512

    3ae0944b9671c17cdae8acf6b3fda9ab3a8084dd529ecc393a207076fdf5a98f8944f0652a34bc62091a2b117891e607a7c57a1e418a3cd9232d16f1837d902b

  • SSDEEP

    6144:n3C9BRo7tvnJ9oH0IRgZvjpUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFV:n3C9ytvngQjpUXoSWlnwJv90aKToFqwN

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      64725e792f6176beab987222eb059740_NEIKI

    • Size

      383KB

    • MD5

      64725e792f6176beab987222eb059740

    • SHA1

      ecbd6e4da8f81b8bdf54f0a52b217142ee483712

    • SHA256

      b22c7dc8d9edd55b3a64fb9b97f284647fcec980e42b04ead1a1ceb5073dcf79

    • SHA512

      3ae0944b9671c17cdae8acf6b3fda9ab3a8084dd529ecc393a207076fdf5a98f8944f0652a34bc62091a2b117891e607a7c57a1e418a3cd9232d16f1837d902b

    • SSDEEP

      6144:n3C9BRo7tvnJ9oH0IRgZvjpUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFV:n3C9ytvngQjpUXoSWlnwJv90aKToFqwN

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks