Overview

overview

10

Static

static

7

42fbd95f4d...cs.exe

windows7-x64

10

42fbd95f4d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42fbd95f4dacf01fdf6079e14c8fc510_NeikiAnalytics

  • Size

    334KB

  • Sample

    240514-3f73qadg61

  • MD5

    42fbd95f4dacf01fdf6079e14c8fc510

  • SHA1

    92e992d8c97d903333c303ba09fb7952dfc0e7ad

  • SHA256

    42b161be12d0af11065bb1688854a8c3d9443c7e03f290526b37d4bcd0e027c1

  • SHA512

    7ce2527218a5826afcc11b1aac6d0d89d5c5fae10513e459498496cee8db6e7f7b101a073fc46429be03bb499a396d5019bf728c0432ef53a7118648db8bd5d4

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/Z:x4wFHoS3eFaKHpv/VycgE8oZ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      42fbd95f4dacf01fdf6079e14c8fc510_NeikiAnalytics

    • Size

      334KB

    • MD5

      42fbd95f4dacf01fdf6079e14c8fc510

    • SHA1

      92e992d8c97d903333c303ba09fb7952dfc0e7ad

    • SHA256

      42b161be12d0af11065bb1688854a8c3d9443c7e03f290526b37d4bcd0e027c1

    • SHA512

      7ce2527218a5826afcc11b1aac6d0d89d5c5fae10513e459498496cee8db6e7f7b101a073fc46429be03bb499a396d5019bf728c0432ef53a7118648db8bd5d4

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/Z:x4wFHoS3eFaKHpv/VycgE8oZ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks