Overview

overview

10

Static

static

3

5d8b9f4e41...cs.exe

windows7-x64

10

5d8b9f4e41...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d8b9f4e41f1eefbdf74ef83370355b0_NeikiAnalytics

  • Size

    94KB

  • Sample

    240511-c381esge9v

  • MD5

    5d8b9f4e41f1eefbdf74ef83370355b0

  • SHA1

    635c45918590920d3b177dd7d2c3b565d3acd0c1

  • SHA256

    095f88ef96f2cbf101a30fb3cdd48975ef0828377e9e9d719d85858a4de46049

  • SHA512

    ec2da0116c1e1a55f9a90aa2ab3af780c774f9786d1f654ef101c65a96c34374f3c7867f0c4c7df45e3d65d033d24afb187ea7f78143d7ed06934341f797f0d6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JxJAg8dtZ:ymb3NkkiQ3mdBjFIWeFGyAsJAg2Z

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5d8b9f4e41f1eefbdf74ef83370355b0_NeikiAnalytics

    • Size

      94KB

    • MD5

      5d8b9f4e41f1eefbdf74ef83370355b0

    • SHA1

      635c45918590920d3b177dd7d2c3b565d3acd0c1

    • SHA256

      095f88ef96f2cbf101a30fb3cdd48975ef0828377e9e9d719d85858a4de46049

    • SHA512

      ec2da0116c1e1a55f9a90aa2ab3af780c774f9786d1f654ef101c65a96c34374f3c7867f0c4c7df45e3d65d033d24afb187ea7f78143d7ed06934341f797f0d6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JxJAg8dtZ:ymb3NkkiQ3mdBjFIWeFGyAsJAg2Z

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks