Overview

overview

10

Static

static

3

322a1c0c1f...cs.exe

windows7-x64

10

322a1c0c1f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    322a1c0c1f4ce2e0a88f6e1fb7c673d0_NeikiAnalytics

  • Size

    480KB

  • Sample

    240515-zmtl5abf55

  • MD5

    322a1c0c1f4ce2e0a88f6e1fb7c673d0

  • SHA1

    bd21b297b46cce6e571198a618fd6b8b4396dc27

  • SHA256

    5506e4b8bbedb26fd9432c665a7f573467b962e460fe3bfa31d1e7d246cb75db

  • SHA512

    349c53a49c00482edd24ff3dfb413bc4d4cca6fa022beed207de8321ff798066997b0ed0a9f0a36e9552b8adab98ef469fe0bf793498c24f5ecdb4f454c6c879

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fez3:Su326p0aroZt0s3

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      322a1c0c1f4ce2e0a88f6e1fb7c673d0_NeikiAnalytics

    • Size

      480KB

    • MD5

      322a1c0c1f4ce2e0a88f6e1fb7c673d0

    • SHA1

      bd21b297b46cce6e571198a618fd6b8b4396dc27

    • SHA256

      5506e4b8bbedb26fd9432c665a7f573467b962e460fe3bfa31d1e7d246cb75db

    • SHA512

      349c53a49c00482edd24ff3dfb413bc4d4cca6fa022beed207de8321ff798066997b0ed0a9f0a36e9552b8adab98ef469fe0bf793498c24f5ecdb4f454c6c879

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fez3:Su326p0aroZt0s3

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks