Overview

overview

10

Static

static

3

9a200a940b...KI.exe

windows7-x64

10

9a200a940b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a200a940b1c076af869e77932b4f0e0_NEIKI

  • Size

    74KB

  • Sample

    240508-n3yegadg49

  • MD5

    9a200a940b1c076af869e77932b4f0e0

  • SHA1

    57fdedc7747e3262ed38b2a0c2fe5428697904ce

  • SHA256

    838bf3eb80e203a354dcec37e82f1b3e1eeb3cbbf9a8aab46eb20c5c5247dd41

  • SHA512

    64d6c21e6e15373ca387a2ae7a7a3985c877b1870ea768baebc88fac1792d31202d36c7c91d7a487d346a677dc0e224952ecbf4bb09714a4835cfd28b8cff213

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKeWqNSZ7:ymb3NkkiQ3mdBjFIjek5o

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9a200a940b1c076af869e77932b4f0e0_NEIKI

    • Size

      74KB

    • MD5

      9a200a940b1c076af869e77932b4f0e0

    • SHA1

      57fdedc7747e3262ed38b2a0c2fe5428697904ce

    • SHA256

      838bf3eb80e203a354dcec37e82f1b3e1eeb3cbbf9a8aab46eb20c5c5247dd41

    • SHA512

      64d6c21e6e15373ca387a2ae7a7a3985c877b1870ea768baebc88fac1792d31202d36c7c91d7a487d346a677dc0e224952ecbf4bb09714a4835cfd28b8cff213

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKeWqNSZ7:ymb3NkkiQ3mdBjFIjek5o

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks