Overview

overview

10

Static

static

7

2ca08ad96e...cs.exe

windows7-x64

10

2ca08ad96e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ca08ad96eba4655c61b06f4a7f0a4c0_NeikiAnalytics

  • Size

    91KB

  • Sample

    240512-trz2tadh8x

  • MD5

    2ca08ad96eba4655c61b06f4a7f0a4c0

  • SHA1

    d5f1b5d19cffa20dbf87eb1a1237f8b95cdf4d22

  • SHA256

    a7b150177dad4f9bd7435b44d19b0a035e932d82a0cf7cc21e1d37c97e01d372

  • SHA512

    3a5e1e001fe38c3d8bbaba5f77104ab023d6982f3512f21e6a317584767135149fbdc00f03c9763ad190ff56f66c3683b48b0ca5d0257ba4db7d3093db8b1012

  • SSDEEP

    1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpLR:8hOmTsF93UYfwC6GIout0fmCiiiXA6mL

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      2ca08ad96eba4655c61b06f4a7f0a4c0_NeikiAnalytics

    • Size

      91KB

    • MD5

      2ca08ad96eba4655c61b06f4a7f0a4c0

    • SHA1

      d5f1b5d19cffa20dbf87eb1a1237f8b95cdf4d22

    • SHA256

      a7b150177dad4f9bd7435b44d19b0a035e932d82a0cf7cc21e1d37c97e01d372

    • SHA512

      3a5e1e001fe38c3d8bbaba5f77104ab023d6982f3512f21e6a317584767135149fbdc00f03c9763ad190ff56f66c3683b48b0ca5d0257ba4db7d3093db8b1012

    • SSDEEP

      1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpLR:8hOmTsF93UYfwC6GIout0fmCiiiXA6mL

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks