Overview

overview

10

Static

static

3

dace444a51...cs.exe

windows7-x64

10

dace444a51...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dace444a510cfd42af260be71cb497c0_NeikiAnalytics

  • Size

    520KB

  • Sample

    240516-mlm2qsgc9x

  • MD5

    dace444a510cfd42af260be71cb497c0

  • SHA1

    488369933c6e61c6c263d385e17fb1a516a5cc79

  • SHA256

    eb33f09cb0e5e09ba12f96e48054920582d9a8a261c681d2fe7aba3222f9dcc3

  • SHA512

    1919e7533cd98c56064b119adbe38c511c041d45c1cbb6d072d5c9ed4f42a1de51d3965613aff0afbb4530e2c4097c9d11644c9e3576ff384b1825b91c8878dd

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3W:q7Tc2NYHUrAwfMHNnpls489m

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      dace444a510cfd42af260be71cb497c0_NeikiAnalytics

    • Size

      520KB

    • MD5

      dace444a510cfd42af260be71cb497c0

    • SHA1

      488369933c6e61c6c263d385e17fb1a516a5cc79

    • SHA256

      eb33f09cb0e5e09ba12f96e48054920582d9a8a261c681d2fe7aba3222f9dcc3

    • SHA512

      1919e7533cd98c56064b119adbe38c511c041d45c1cbb6d072d5c9ed4f42a1de51d3965613aff0afbb4530e2c4097c9d11644c9e3576ff384b1825b91c8878dd

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3W:q7Tc2NYHUrAwfMHNnpls489m

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks