Overview

overview

10

Static

static

3

6a05a2ce02...cs.exe

windows7-x64

10

6a05a2ce02...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a05a2ce027efc00c6481e718628dde0_NeikiAnalytics

  • Size

    81KB

  • Sample

    240515-dc2dbseb85

  • MD5

    6a05a2ce027efc00c6481e718628dde0

  • SHA1

    99c483e65b72eea9928668e63a15e70b9cff2c8e

  • SHA256

    bd4a51c2f2aca70a9ab95a8d93f4f4feedbcb6a8f98e9fd0644286a3ace3b999

  • SHA512

    02c38aab8431758a55de0a97c158d2a83adbe8dca8a9760ee712245ded5dd74bfbd1474e2fbd6e790ada1bfb924378445fd9f20653b9c91fec9c238f1726732b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYS8nj/R:ymb3NkkiQ3mdBjFo7LAIbT6jJ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6a05a2ce027efc00c6481e718628dde0_NeikiAnalytics

    • Size

      81KB

    • MD5

      6a05a2ce027efc00c6481e718628dde0

    • SHA1

      99c483e65b72eea9928668e63a15e70b9cff2c8e

    • SHA256

      bd4a51c2f2aca70a9ab95a8d93f4f4feedbcb6a8f98e9fd0644286a3ace3b999

    • SHA512

      02c38aab8431758a55de0a97c158d2a83adbe8dca8a9760ee712245ded5dd74bfbd1474e2fbd6e790ada1bfb924378445fd9f20653b9c91fec9c238f1726732b

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYS8nj/R:ymb3NkkiQ3mdBjFo7LAIbT6jJ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks