Overview

overview

10

Static

static

3

044fa19926...cs.exe

windows7-x64

10

044fa19926...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    044fa1992658ec6bacb6b1f960312550_NeikiAnalytics

  • Size

    73KB

  • Sample

    240510-zxal1acf82

  • MD5

    044fa1992658ec6bacb6b1f960312550

  • SHA1

    0ab1805d5e1fd7976fc7062dcacca45d919a02d3

  • SHA256

    2fb4aa62ccbdb6501a1b2c54e512a16fc6ca7873871f1df75ac25061d247f2a4

  • SHA512

    d831f29671b12c1a72b14035a14a45868b1f124579ddafb7e70e23618b8ef4b05e4e1cfcf4da60f664e9a91fdc8007a7b1925c9f5be1644984b748cca372306d

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJSsD+cGUFzJ8ng:ymb3NkkiQ3mdBjFIwsDhbNf

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      044fa1992658ec6bacb6b1f960312550_NeikiAnalytics

    • Size

      73KB

    • MD5

      044fa1992658ec6bacb6b1f960312550

    • SHA1

      0ab1805d5e1fd7976fc7062dcacca45d919a02d3

    • SHA256

      2fb4aa62ccbdb6501a1b2c54e512a16fc6ca7873871f1df75ac25061d247f2a4

    • SHA512

      d831f29671b12c1a72b14035a14a45868b1f124579ddafb7e70e23618b8ef4b05e4e1cfcf4da60f664e9a91fdc8007a7b1925c9f5be1644984b748cca372306d

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJSsD+cGUFzJ8ng:ymb3NkkiQ3mdBjFIwsDhbNf

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks