Overview

overview

10

Static

static

3

43f516efa3...cs.exe

windows7-x64

10

43f516efa3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    43f516efa3adfe881d783fd76c0db8c0_NeikiAnalytics

  • Size

    970KB

  • Sample

    240510-w8437see72

  • MD5

    43f516efa3adfe881d783fd76c0db8c0

  • SHA1

    d809ed5ef09b00e4c8ce0bee501a3019cc5576e3

  • SHA256

    215bb0a1c292ae3d85a2fbbc6910f231d8ed15b8af74585d3680a0fa78f2ffb2

  • SHA512

    0af90f7ab3c8dbacd85db32fff7c889149428e852b60677427040057dc203d38d768a634bf659b6c2e9598f14a1236023a2edbccde2519c854ff49009eaac1d3

  • SSDEEP

    12288:n3C9yMo+S0L9xRnoq7H9xqYL04iVypNKvzcMwdBS3b3aoqYveXVadBlHD+CURPO5:SgD4bhoqLDqYLagB6Wj1+Cyv

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      43f516efa3adfe881d783fd76c0db8c0_NeikiAnalytics

    • Size

      970KB

    • MD5

      43f516efa3adfe881d783fd76c0db8c0

    • SHA1

      d809ed5ef09b00e4c8ce0bee501a3019cc5576e3

    • SHA256

      215bb0a1c292ae3d85a2fbbc6910f231d8ed15b8af74585d3680a0fa78f2ffb2

    • SHA512

      0af90f7ab3c8dbacd85db32fff7c889149428e852b60677427040057dc203d38d768a634bf659b6c2e9598f14a1236023a2edbccde2519c854ff49009eaac1d3

    • SSDEEP

      12288:n3C9yMo+S0L9xRnoq7H9xqYL04iVypNKvzcMwdBS3b3aoqYveXVadBlHD+CURPO5:SgD4bhoqLDqYLagB6Wj1+Cyv

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks