Overview

overview

10

Static

static

3

54f18b3585...cs.exe

windows7-x64

10

54f18b3585...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54f18b358597d7aba47a9fd12936beb0_NeikiAnalytics

  • Size

    144KB

  • Sample

    240510-dflgaaac27

  • MD5

    54f18b358597d7aba47a9fd12936beb0

  • SHA1

    d443626351daba488dcc926b0ed9232fb36e2aea

  • SHA256

    1b4223fee33608d89a961fedfef2338aa9dd32da8acefce437774d3991667ed2

  • SHA512

    52515cd4e53c93d2d416102ca55b91b54c20a71a1676fc81e7b4f70b99e588cda82c1438568ba6a8c953887d3c2366ed91ff88f63f51981ebc41c0c5e0a4302f

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFosxXGPXbXQMFHLgDWSmklgQh:n3C9BRosxW8MFHLMW7Qh

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      54f18b358597d7aba47a9fd12936beb0_NeikiAnalytics

    • Size

      144KB

    • MD5

      54f18b358597d7aba47a9fd12936beb0

    • SHA1

      d443626351daba488dcc926b0ed9232fb36e2aea

    • SHA256

      1b4223fee33608d89a961fedfef2338aa9dd32da8acefce437774d3991667ed2

    • SHA512

      52515cd4e53c93d2d416102ca55b91b54c20a71a1676fc81e7b4f70b99e588cda82c1438568ba6a8c953887d3c2366ed91ff88f63f51981ebc41c0c5e0a4302f

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFosxXGPXbXQMFHLgDWSmklgQh:n3C9BRosxW8MFHLMW7Qh

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks