Overview

overview

10

Static

static

3

82a1d57941...cs.exe

windows7-x64

10

82a1d57941...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82a1d57941989bbedc6fa19893efbdd0_NeikiAnalytics

  • Size

    371KB

  • Sample

    240512-lzwqcsde93

  • MD5

    82a1d57941989bbedc6fa19893efbdd0

  • SHA1

    46cae7b2e437de12c706d6b35dc8b54aed92ed60

  • SHA256

    193e9fef40e8a1b82c7e5ff63202e6b1d2048d6dacb3dbaedc838850796c7c42

  • SHA512

    004e3e2587e473318888f1c90195489f3ea705203b67ae4e5b8b3cba966e666ca85a5f79a0df4861eca9abebd03bcbdf49f12fd61d4b6f3790118c6467337204

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq7mjKPC+gy:n3C9yMo+S0L9xRnoq7mePPT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      82a1d57941989bbedc6fa19893efbdd0_NeikiAnalytics

    • Size

      371KB

    • MD5

      82a1d57941989bbedc6fa19893efbdd0

    • SHA1

      46cae7b2e437de12c706d6b35dc8b54aed92ed60

    • SHA256

      193e9fef40e8a1b82c7e5ff63202e6b1d2048d6dacb3dbaedc838850796c7c42

    • SHA512

      004e3e2587e473318888f1c90195489f3ea705203b67ae4e5b8b3cba966e666ca85a5f79a0df4861eca9abebd03bcbdf49f12fd61d4b6f3790118c6467337204

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq7mjKPC+gy:n3C9yMo+S0L9xRnoq7mePPT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks