Overview

overview

10

Static

static

3

9e64cc715a...cs.exe

windows7-x64

10

9e64cc715a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e64cc715ab25ba583dd90441d701dc0_NeikiAnalytics

  • Size

    334KB

  • Sample

    240511-h9g36sgb65

  • MD5

    9e64cc715ab25ba583dd90441d701dc0

  • SHA1

    8c5c011647cff50226ad7d13c2000c8e5acd94f3

  • SHA256

    fc5ad15e15b0afb9e4605cc2db532dba8261be43f1cd5d5e1d77ba2da3e48ab5

  • SHA512

    c5485917a563ce8f68f420ad737147daa26e4f90f47c3f56d7b13bb28413bd7d4a3405f1a0c9d85bd4c88869a6c9e5f713672dc1e886a1197caf7ce4c0e211ea

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHqnuOeHzmB600TUA6Z7zupc+Bv:n3C9BRo7tvnJ99T/KZEuOod00TG+Bv

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9e64cc715ab25ba583dd90441d701dc0_NeikiAnalytics

    • Size

      334KB

    • MD5

      9e64cc715ab25ba583dd90441d701dc0

    • SHA1

      8c5c011647cff50226ad7d13c2000c8e5acd94f3

    • SHA256

      fc5ad15e15b0afb9e4605cc2db532dba8261be43f1cd5d5e1d77ba2da3e48ab5

    • SHA512

      c5485917a563ce8f68f420ad737147daa26e4f90f47c3f56d7b13bb28413bd7d4a3405f1a0c9d85bd4c88869a6c9e5f713672dc1e886a1197caf7ce4c0e211ea

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHqnuOeHzmB600TUA6Z7zupc+Bv:n3C9BRo7tvnJ99T/KZEuOod00TG+Bv

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks