Overview

overview

10

Static

static

3

025c702ca5...cs.exe

windows7-x64

10

025c702ca5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    025c702ca52645d272f897cd9fee1f90_NeikiAnalytics

  • Size

    367KB

  • Sample

    240514-v9g5dsgc6w

  • MD5

    025c702ca52645d272f897cd9fee1f90

  • SHA1

    2c5543a19603feaeaae030a852fe3e4b26953407

  • SHA256

    00e8855038f16779fcd6b51f842dc3d4e4ed1d662274173d3cb9bf1357d60e54

  • SHA512

    e93dee10434acbe8bd0481b1c54e5d2256ebdb7449fd6a61ef23e6e7c984e39f6e72faca9aaa99ecfed13e28b143b6123182fed9a95be998ff771696204fea1c

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9FrHSwh/c/hdTWGIaxJ8TN005pWmjVwdSsy3:n3C9BRo7tvnJ9Fywhk/T7xyTpShZo

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      025c702ca52645d272f897cd9fee1f90_NeikiAnalytics

    • Size

      367KB

    • MD5

      025c702ca52645d272f897cd9fee1f90

    • SHA1

      2c5543a19603feaeaae030a852fe3e4b26953407

    • SHA256

      00e8855038f16779fcd6b51f842dc3d4e4ed1d662274173d3cb9bf1357d60e54

    • SHA512

      e93dee10434acbe8bd0481b1c54e5d2256ebdb7449fd6a61ef23e6e7c984e39f6e72faca9aaa99ecfed13e28b143b6123182fed9a95be998ff771696204fea1c

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9FrHSwh/c/hdTWGIaxJ8TN005pWmjVwdSsy3:n3C9BRo7tvnJ9Fywhk/T7xyTpShZo

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks