Overview

overview

10

Static

static

7

cc92f0bc50...cs.exe

windows7-x64

10

cc92f0bc50...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc92f0bc50e485763a0db8ebece4c830_NeikiAnalytics

  • Size

    130KB

  • Sample

    240514-s714dadb2w

  • MD5

    cc92f0bc50e485763a0db8ebece4c830

  • SHA1

    35c83bf6c866485fb9c4ab5146bbb008c415c236

  • SHA256

    8e6cc40b58c73c7ab673a1ef0ce5bd98a7f2c17d942fd9a99f7a449b38050aa8

  • SHA512

    2def062f3818b7e997343e94018ad5fd1d9bd438d3c6a744516f6d875b3d384be7302f0e4a837bc9bee85f14a949bb27e1b7e564b3f78c62d36b184d7a819214

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLQS7ByFqAxTOUIZX3UCmK:9cm4FmowdHoSdSyEAxyFXEVK

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cc92f0bc50e485763a0db8ebece4c830_NeikiAnalytics

    • Size

      130KB

    • MD5

      cc92f0bc50e485763a0db8ebece4c830

    • SHA1

      35c83bf6c866485fb9c4ab5146bbb008c415c236

    • SHA256

      8e6cc40b58c73c7ab673a1ef0ce5bd98a7f2c17d942fd9a99f7a449b38050aa8

    • SHA512

      2def062f3818b7e997343e94018ad5fd1d9bd438d3c6a744516f6d875b3d384be7302f0e4a837bc9bee85f14a949bb27e1b7e564b3f78c62d36b184d7a819214

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLQS7ByFqAxTOUIZX3UCmK:9cm4FmowdHoSdSyEAxyFXEVK

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks