Overview

overview

10

Static

static

3

8cf86d541c...KI.exe

windows7-x64

10

8cf86d541c...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cf86d541c02145be85e053c30aa7690_NEIKI

  • Size

    151KB

  • Sample

    240508-21xbaaeg38

  • MD5

    8cf86d541c02145be85e053c30aa7690

  • SHA1

    2563981f6829d80b03465ee3689fcdf60026056c

  • SHA256

    d3031b2a5f3cb31690eb20c5cb1eee2a676a968f39969c0e6fa1031c12e05475

  • SHA512

    c8b7b4b4c57099bd82a366d08f97c792d4e580bd27b8c02d7424a70b77f8dacf4cbc2eb5108695cafed270ff2b55b8052191f1578f08581e15965241648d72d6

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gBEpBSlrseOwXKvr7Q:n3C9BRo7tvnJ9oEzq7byQ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8cf86d541c02145be85e053c30aa7690_NEIKI

    • Size

      151KB

    • MD5

      8cf86d541c02145be85e053c30aa7690

    • SHA1

      2563981f6829d80b03465ee3689fcdf60026056c

    • SHA256

      d3031b2a5f3cb31690eb20c5cb1eee2a676a968f39969c0e6fa1031c12e05475

    • SHA512

      c8b7b4b4c57099bd82a366d08f97c792d4e580bd27b8c02d7424a70b77f8dacf4cbc2eb5108695cafed270ff2b55b8052191f1578f08581e15965241648d72d6

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gBEpBSlrseOwXKvr7Q:n3C9BRo7tvnJ9oEzq7byQ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks