Overview

overview

10

Static

static

3

f2c61a1f8a...KI.exe

windows7-x64

10

f2c61a1f8a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f2c61a1f8a30f431647dfdb46d858fa0_NEIKI

  • Size

    61KB

  • Sample

    240508-gz6hcahc95

  • MD5

    f2c61a1f8a30f431647dfdb46d858fa0

  • SHA1

    40014712723c88a334baa37960620c96b55a23d9

  • SHA256

    c45cb58127c01c256110542325203e3aed84cd7c7e0f8b157f679a5b7084855d

  • SHA512

    13624dfba08436d86c99da8a56f5e6755eb833335c7a8ff889ce2809b5bf31299e48dfbe198a4ce1d08e322e00652e27f3841ea6f3fea5de9406b1914ab1a419

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKEn:ymb3NkkiQ3mdBjFII9ZvHKEn

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      f2c61a1f8a30f431647dfdb46d858fa0_NEIKI

    • Size

      61KB

    • MD5

      f2c61a1f8a30f431647dfdb46d858fa0

    • SHA1

      40014712723c88a334baa37960620c96b55a23d9

    • SHA256

      c45cb58127c01c256110542325203e3aed84cd7c7e0f8b157f679a5b7084855d

    • SHA512

      13624dfba08436d86c99da8a56f5e6755eb833335c7a8ff889ce2809b5bf31299e48dfbe198a4ce1d08e322e00652e27f3841ea6f3fea5de9406b1914ab1a419

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKEn:ymb3NkkiQ3mdBjFII9ZvHKEn

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks