Overview

overview

10

Static

static

3

c4e7f0c8ea...cs.exe

windows7-x64

10

c4e7f0c8ea...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c4e7f0c8ea724d03a4916e96e696ae00_NeikiAnalytics

  • Size

    81KB

  • Sample

    240514-nsp1cadh4t

  • MD5

    c4e7f0c8ea724d03a4916e96e696ae00

  • SHA1

    daa1479c312daea8d770645a560c48b311ad521b

  • SHA256

    0117bba7faa8b474f72005032282f075d55e4788c76209924cdcefcef598e4a3

  • SHA512

    ca34a25e4352cb1b7179e96fed27c789a55bd944d469ace9600abcedd797962ba717757448d7d873503f5ca0397f02cdb65ad44e66deca3237a0bc8e68038805

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JkZPsvN:ymb3NkkiQ3mdBjFIWeFGyA9PK

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c4e7f0c8ea724d03a4916e96e696ae00_NeikiAnalytics

    • Size

      81KB

    • MD5

      c4e7f0c8ea724d03a4916e96e696ae00

    • SHA1

      daa1479c312daea8d770645a560c48b311ad521b

    • SHA256

      0117bba7faa8b474f72005032282f075d55e4788c76209924cdcefcef598e4a3

    • SHA512

      ca34a25e4352cb1b7179e96fed27c789a55bd944d469ace9600abcedd797962ba717757448d7d873503f5ca0397f02cdb65ad44e66deca3237a0bc8e68038805

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JkZPsvN:ymb3NkkiQ3mdBjFIWeFGyA9PK

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks