Overview

overview

10

Static

static

3

0c85ea076d...cs.exe

windows7-x64

10

0c85ea076d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c85ea076dcc9296f4fa953ba6674e50_NeikiAnalytics

  • Size

    232KB

  • Sample

    240513-ym7cjscc76

  • MD5

    0c85ea076dcc9296f4fa953ba6674e50

  • SHA1

    f260eeee25c8ee1ba8824bea39aa5e934ba96f4d

  • SHA256

    73520ba9871e7eb4d409d7e98a28019a12ff12b2a38b08f5608de875c040e5cc

  • SHA512

    d593f587be0ef23d7e1a7477a427f1d8bbe75420b61c56cc59280d0a8c5018eac398a6d7f0de0e0136dabadce04fa60e078ba2640fa24a7bae5f41134f1e211c

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+4:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0c85ea076dcc9296f4fa953ba6674e50_NeikiAnalytics

    • Size

      232KB

    • MD5

      0c85ea076dcc9296f4fa953ba6674e50

    • SHA1

      f260eeee25c8ee1ba8824bea39aa5e934ba96f4d

    • SHA256

      73520ba9871e7eb4d409d7e98a28019a12ff12b2a38b08f5608de875c040e5cc

    • SHA512

      d593f587be0ef23d7e1a7477a427f1d8bbe75420b61c56cc59280d0a8c5018eac398a6d7f0de0e0136dabadce04fa60e078ba2640fa24a7bae5f41134f1e211c

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+4:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks