Overview

overview

10

Static

static

3

434fb356b4...cs.exe

windows7-x64

10

434fb356b4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    434fb356b44099233f93bad587424d90_NeikiAnalytics

  • Size

    114KB

  • Sample

    240512-xmxyfabd7z

  • MD5

    434fb356b44099233f93bad587424d90

  • SHA1

    cd1c644873299f56590d456c1e96e61a692b2be8

  • SHA256

    66d80073c3288cea285f33a2cec63f31442d6561e6202d049779e487c1e90364

  • SHA512

    544d841bf7f6a684a5d61d79f127dec3fc0d1c5656285be00493b2bd44a3051461a8b418f3515e4ca7a7d0b3df3e845f056b7cab601e12324c6155dcb99e54e0

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73oYUCD7R2F2UVbyy0NN:ymb3NkkiQ3mdBjFo73HUoMsAbrK

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      434fb356b44099233f93bad587424d90_NeikiAnalytics

    • Size

      114KB

    • MD5

      434fb356b44099233f93bad587424d90

    • SHA1

      cd1c644873299f56590d456c1e96e61a692b2be8

    • SHA256

      66d80073c3288cea285f33a2cec63f31442d6561e6202d049779e487c1e90364

    • SHA512

      544d841bf7f6a684a5d61d79f127dec3fc0d1c5656285be00493b2bd44a3051461a8b418f3515e4ca7a7d0b3df3e845f056b7cab601e12324c6155dcb99e54e0

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73oYUCD7R2F2UVbyy0NN:ymb3NkkiQ3mdBjFo73HUoMsAbrK

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks