Overview

overview

10

Static

static

7

9c497afab2...cs.exe

windows7-x64

10

9c497afab2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c497afab23ef32d89fe8fd5f8eb18e0_NeikiAnalytics

  • Size

    307KB

  • Sample

    240511-h3vexsda6s

  • MD5

    9c497afab23ef32d89fe8fd5f8eb18e0

  • SHA1

    4017faeacb60a18098542dd783b16ac919e03f6b

  • SHA256

    07fb6d3c26accfb94476f19700de33b26dc997b6ec9dfb1215226b4a34d53ded

  • SHA512

    c9b2609fe05365b56c9971f215f3794888bcef09c2e35f87b2d9a642de711ef92310a643a35e8e2b96c77df285e583fdbd0ca17af28f70c123dc6fed7db13e62

  • SSDEEP

    6144:9cm4FmowdHoS4/8UJCf4upvUjQSmpikAAKeMjii:/4wFHoS4kUJE4IuzQifAKjj9

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9c497afab23ef32d89fe8fd5f8eb18e0_NeikiAnalytics

    • Size

      307KB

    • MD5

      9c497afab23ef32d89fe8fd5f8eb18e0

    • SHA1

      4017faeacb60a18098542dd783b16ac919e03f6b

    • SHA256

      07fb6d3c26accfb94476f19700de33b26dc997b6ec9dfb1215226b4a34d53ded

    • SHA512

      c9b2609fe05365b56c9971f215f3794888bcef09c2e35f87b2d9a642de711ef92310a643a35e8e2b96c77df285e583fdbd0ca17af28f70c123dc6fed7db13e62

    • SSDEEP

      6144:9cm4FmowdHoS4/8UJCf4upvUjQSmpikAAKeMjii:/4wFHoS4kUJE4IuzQifAKjj9

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks