Overview

overview

10

Static

static

7

dc210293ec...cs.exe

windows7-x64

10

dc210293ec...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc210293ec69028751881e7b03f5afd0_NeikiAnalytics

  • Size

    83KB

  • Sample

    240516-naz3lahf9z

  • MD5

    dc210293ec69028751881e7b03f5afd0

  • SHA1

    389b6b89894170069ff433eef2e236a47e9add73

  • SHA256

    9fa51a85a6e6ca6d1f9aeccab7bfe413bc52436950fcddd1060f2140b57bb6d2

  • SHA512

    c7f1f60b8c9ffeeb482206822c9a077580fab8736ee7ae8e120274f529a436c7c4a135c9ae55bf881338d60bad345ff82ad9b52e5eb375a264bf76f61a73a448

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpCihKG:zhOmTsF93UYfwC6GIoutiTU2HVS64hb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      dc210293ec69028751881e7b03f5afd0_NeikiAnalytics

    • Size

      83KB

    • MD5

      dc210293ec69028751881e7b03f5afd0

    • SHA1

      389b6b89894170069ff433eef2e236a47e9add73

    • SHA256

      9fa51a85a6e6ca6d1f9aeccab7bfe413bc52436950fcddd1060f2140b57bb6d2

    • SHA512

      c7f1f60b8c9ffeeb482206822c9a077580fab8736ee7ae8e120274f529a436c7c4a135c9ae55bf881338d60bad345ff82ad9b52e5eb375a264bf76f61a73a448

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpCihKG:zhOmTsF93UYfwC6GIoutiTU2HVS64hb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks