Overview

overview

10

Static

static

3

239c244881...cs.exe

windows7-x64

10

239c244881...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    239c24488160446e94416d3f93b1f3d0_NeikiAnalytics

  • Size

    63KB

  • Sample

    240510-t5w73sac99

  • MD5

    239c24488160446e94416d3f93b1f3d0

  • SHA1

    162753d06e68bfcd90628caed1a49759749e2da9

  • SHA256

    82b5cebeec212f0039c982d0ba5f1313153779b7838c87658b54b706b536dfc0

  • SHA512

    af5b3dbccce123a4392ba844a78b839922e4324f93af0dbc6ba8a9792f24290d5264566b0d07b6ef7737667092c2cfa9c12b5c8660038b28331c2b74c3b3f085

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3AQ:ymb3NkkiQ3mdBjFI46TQQ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      239c24488160446e94416d3f93b1f3d0_NeikiAnalytics

    • Size

      63KB

    • MD5

      239c24488160446e94416d3f93b1f3d0

    • SHA1

      162753d06e68bfcd90628caed1a49759749e2da9

    • SHA256

      82b5cebeec212f0039c982d0ba5f1313153779b7838c87658b54b706b536dfc0

    • SHA512

      af5b3dbccce123a4392ba844a78b839922e4324f93af0dbc6ba8a9792f24290d5264566b0d07b6ef7737667092c2cfa9c12b5c8660038b28331c2b74c3b3f085

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3AQ:ymb3NkkiQ3mdBjFI46TQQ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks