Overview

overview

10

Static

static

3

a02fc56660...cs.exe

windows7-x64

10

a02fc56660...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a02fc56660d8bc581258de87459a1360_NeikiAnalytics

  • Size

    343KB

  • Sample

    240509-vn11daga99

  • MD5

    a02fc56660d8bc581258de87459a1360

  • SHA1

    b5a2c8ff42d3c4c1087b21134268c64d29b305f9

  • SHA256

    feb6c1010fcd73fda00a9524f95e1d58143b26cebfa423996a3d37f0d43bfa60

  • SHA512

    0041d38a6907eba33e53fc6dbb070db1b82ef34119b650b26183d45a050e643ed507ec9b58ac30a44bf48d41fd559b9cd792e5aea999d7a822f3267afd57e8f0

  • SSDEEP

    6144:n3C9BRo/AIX2MUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFhXjmnwJQyIk:n3C9uDnUXoSWlnwJv90aKToFqwfIBa

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a02fc56660d8bc581258de87459a1360_NeikiAnalytics

    • Size

      343KB

    • MD5

      a02fc56660d8bc581258de87459a1360

    • SHA1

      b5a2c8ff42d3c4c1087b21134268c64d29b305f9

    • SHA256

      feb6c1010fcd73fda00a9524f95e1d58143b26cebfa423996a3d37f0d43bfa60

    • SHA512

      0041d38a6907eba33e53fc6dbb070db1b82ef34119b650b26183d45a050e643ed507ec9b58ac30a44bf48d41fd559b9cd792e5aea999d7a822f3267afd57e8f0

    • SSDEEP

      6144:n3C9BRo/AIX2MUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFhXjmnwJQyIk:n3C9uDnUXoSWlnwJv90aKToFqwfIBa

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks