Overview

overview

10

Static

static

3

59c3c5d1e0...cs.exe

windows7-x64

10

59c3c5d1e0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    59c3c5d1e02ece2a51a51bcbfd150f20_NeikiAnalytics

  • Size

    467KB

  • Sample

    240509-rmyl3sdh4y

  • MD5

    59c3c5d1e02ece2a51a51bcbfd150f20

  • SHA1

    93db7cf039e13452bf0850645a0123433f01c062

  • SHA256

    8966dfba3b7116eb9b2fd6d0812940d604be70c5436c6ec1b4d61a86139de204

  • SHA512

    b2dd728b3ca91cd2196aff073a55c050f0a59cf570044db69dd627346c7f6b6a48619581fbd548983cf0f88445a06b6c87dfce598ac3610529f7cfcb1b622322

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93sEqkeGLedW0A8hho:n3C9yMo+S0L9xRnoq7H9xqYLed35hG

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      59c3c5d1e02ece2a51a51bcbfd150f20_NeikiAnalytics

    • Size

      467KB

    • MD5

      59c3c5d1e02ece2a51a51bcbfd150f20

    • SHA1

      93db7cf039e13452bf0850645a0123433f01c062

    • SHA256

      8966dfba3b7116eb9b2fd6d0812940d604be70c5436c6ec1b4d61a86139de204

    • SHA512

      b2dd728b3ca91cd2196aff073a55c050f0a59cf570044db69dd627346c7f6b6a48619581fbd548983cf0f88445a06b6c87dfce598ac3610529f7cfcb1b622322

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93sEqkeGLedW0A8hho:n3C9yMo+S0L9xRnoq7H9xqYLed35hG

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks