Overview

overview

10

Static

static

7

5166950456...cs.exe

windows7-x64

10

5166950456...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5166950456179abc92150a26df2a3c40_NeikiAnalytics

  • Size

    334KB

  • Sample

    240514-ccf7qafb69

  • MD5

    5166950456179abc92150a26df2a3c40

  • SHA1

    726b0d3589208e1154e22263be9dc54ef116734c

  • SHA256

    c251c79d528bea1ddd089a0db712881c1bd2eceb13427a47678b5b76f7801ee5

  • SHA512

    20db240cc080fe8d7ad8db22fbbe7d0d90aa3bb997317a99971a66a0e4e208132cdd58ddbb8f844a2189e4f650078186725f71e047e52317683e9250a01e86b6

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/x:x4wFHoS3eFaKHpv/VycgE8ox

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5166950456179abc92150a26df2a3c40_NeikiAnalytics

    • Size

      334KB

    • MD5

      5166950456179abc92150a26df2a3c40

    • SHA1

      726b0d3589208e1154e22263be9dc54ef116734c

    • SHA256

      c251c79d528bea1ddd089a0db712881c1bd2eceb13427a47678b5b76f7801ee5

    • SHA512

      20db240cc080fe8d7ad8db22fbbe7d0d90aa3bb997317a99971a66a0e4e208132cdd58ddbb8f844a2189e4f650078186725f71e047e52317683e9250a01e86b6

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/x:x4wFHoS3eFaKHpv/VycgE8ox

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks