Overview

overview

10

Static

static

3

d1706598af...cs.exe

windows7-x64

10

d1706598af...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1706598aff3d9f4e3744724c27632e0_NeikiAnalytics

  • Size

    58KB

  • Sample

    240515-pds9wsgh98

  • MD5

    d1706598aff3d9f4e3744724c27632e0

  • SHA1

    63c0bc4414ef269a3324af9d9fc4c50f711d101a

  • SHA256

    8b04d0b9d043d8d78b74aeabb3193ffb15652d7a69271a05ef5097dc82659c5a

  • SHA512

    8356edee1090ee554e61554b9062bc4bce0a644efd1214339eae496fa55cfa8cf87abee0f272134863192d42e7973867c93c995d74b5e9fbcf34d348252bbe71

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsW:ymb3NkkiQ3mdBjFIsIFW

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d1706598aff3d9f4e3744724c27632e0_NeikiAnalytics

    • Size

      58KB

    • MD5

      d1706598aff3d9f4e3744724c27632e0

    • SHA1

      63c0bc4414ef269a3324af9d9fc4c50f711d101a

    • SHA256

      8b04d0b9d043d8d78b74aeabb3193ffb15652d7a69271a05ef5097dc82659c5a

    • SHA512

      8356edee1090ee554e61554b9062bc4bce0a644efd1214339eae496fa55cfa8cf87abee0f272134863192d42e7973867c93c995d74b5e9fbcf34d348252bbe71

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsW:ymb3NkkiQ3mdBjFIsIFW

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks