Overview

overview

10

Static

static

10

5433ce5f37...cs.exe

windows7-x64

10

5433ce5f37...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5433ce5f372e78ea0feac807b5e80cf0_NeikiAnalytics

  • Size

    837KB

  • Sample

    240512-bf4lracb33

  • MD5

    5433ce5f372e78ea0feac807b5e80cf0

  • SHA1

    94cf39d63be2da0a86126c2d31e2d94ce1f29c32

  • SHA256

    d65fecea3682295083a14185d4c448d22dd676bb4172ae78cf67554212497cbf

  • SHA512

    cd2abe7ccff9359aa2116ba3e4927fb748f106010158b46727fca7f8e882a7f38faea47ca1f880f11cfc72e3b18770ac3d84d951b90ac2caf93c1b2a5ac573ae

  • SSDEEP

    24576:vdJtCf7SebJ4U0PDKL4PXQMoNwqe1hQCc5AgfukxAmD9/7s0UZX69WvHxp:vdyJCyuPKun

Score
10/10
blackmoonbankerpersistencetrojan

Malware Config

Targets

    • Target

      5433ce5f372e78ea0feac807b5e80cf0_NeikiAnalytics

    • Size

      837KB

    • MD5

      5433ce5f372e78ea0feac807b5e80cf0

    • SHA1

      94cf39d63be2da0a86126c2d31e2d94ce1f29c32

    • SHA256

      d65fecea3682295083a14185d4c448d22dd676bb4172ae78cf67554212497cbf

    • SHA512

      cd2abe7ccff9359aa2116ba3e4927fb748f106010158b46727fca7f8e882a7f38faea47ca1f880f11cfc72e3b18770ac3d84d951b90ac2caf93c1b2a5ac573ae

    • SSDEEP

      24576:vdJtCf7SebJ4U0PDKL4PXQMoNwqe1hQCc5AgfukxAmD9/7s0UZX69WvHxp:vdyJCyuPKun

    Score
    10/10
    blackmoonbankertrojanpersistence

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Sets file execution options in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks