Overview

overview

10

Static

static

3

96e024a220...cs.exe

windows7-x64

10

96e024a220...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    96e024a2205f5b3cfd95f3a4c6c0a890_NeikiAnalytics

  • Size

    75KB

  • Sample

    240516-ezblvscb23

  • MD5

    96e024a2205f5b3cfd95f3a4c6c0a890

  • SHA1

    bb2cab12d15817c4fdf6507eed09921368fe5b33

  • SHA256

    5009a3a3eb77ca86b83296529f0217aa679fbe2e4653259ba231eae3a0513278

  • SHA512

    36b0bfbe881e4a5ffce57e5d987aa5f68c11f992444c23a6425d0a1d0f7716922eecd7566442adde8c4c26ac9f89e27e46c75b60a58df7eef7438642bb88a9e7

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8gu3Gno9yvrjKX:ymb3NkkiQ3mdBjFo68t3Gno9Iu

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      96e024a2205f5b3cfd95f3a4c6c0a890_NeikiAnalytics

    • Size

      75KB

    • MD5

      96e024a2205f5b3cfd95f3a4c6c0a890

    • SHA1

      bb2cab12d15817c4fdf6507eed09921368fe5b33

    • SHA256

      5009a3a3eb77ca86b83296529f0217aa679fbe2e4653259ba231eae3a0513278

    • SHA512

      36b0bfbe881e4a5ffce57e5d987aa5f68c11f992444c23a6425d0a1d0f7716922eecd7566442adde8c4c26ac9f89e27e46c75b60a58df7eef7438642bb88a9e7

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8gu3Gno9yvrjKX:ymb3NkkiQ3mdBjFo68t3Gno9Iu

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks