Overview

overview

10

Static

static

3

56b16c3b21...cs.exe

windows7-x64

10

56b16c3b21...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    56b16c3b219c45bc8083d4e4904d6440_NeikiAnalytics

  • Size

    182KB

  • Sample

    240511-cm27yaab86

  • MD5

    56b16c3b219c45bc8083d4e4904d6440

  • SHA1

    97b452375ba28f4d2e486ecf8b984283da74f56b

  • SHA256

    bc1cb1cb60312ae86d0d418783751fb5163221477f2717bc69c8af0e3ffc158c

  • SHA512

    6c8d0d99b1c070a6c7b242e38bd6802f73b88a6c4d277108f307991def8e6cd1b22b120be67b202c36f8ce0ef6311a82d9acb193fc73d8a6144196746bd70cf7

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+IJPhbMqr:PhOm2sI93UufdC67ciJTm5hIU

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      56b16c3b219c45bc8083d4e4904d6440_NeikiAnalytics

    • Size

      182KB

    • MD5

      56b16c3b219c45bc8083d4e4904d6440

    • SHA1

      97b452375ba28f4d2e486ecf8b984283da74f56b

    • SHA256

      bc1cb1cb60312ae86d0d418783751fb5163221477f2717bc69c8af0e3ffc158c

    • SHA512

      6c8d0d99b1c070a6c7b242e38bd6802f73b88a6c4d277108f307991def8e6cd1b22b120be67b202c36f8ce0ef6311a82d9acb193fc73d8a6144196746bd70cf7

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+IJPhbMqr:PhOm2sI93UufdC67ciJTm5hIU

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks