Overview

overview

10

Static

static

7

ddf09f94db...cs.exe

windows7-x64

10

ddf09f94db...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddf09f94dbcce65caa5c0b834503ca50_NeikiAnalytics

  • Size

    198KB

  • Sample

    240516-pb6r7scc93

  • MD5

    ddf09f94dbcce65caa5c0b834503ca50

  • SHA1

    5b7b7860181561d2c6d2816b4923cd695e310361

  • SHA256

    5de75757ce193486ad624d356b5fe489d8bd31ef6a9a5645a2bb68cb69c601ef

  • SHA512

    9108ed081e924c9e69e6005af3d72353d8ddbdb510b93155fda990512c600d1c83fa48b870935e3a31c23db16d9c8bb9159d8920cf854769a59d9aeff4a27fc6

  • SSDEEP

    3072:UhOmTsF93UYfwC6GIoutmm6tAjGIs3Fv9KdYGUSy3ByE9muRKC:Ucm4FmowdHoSmm6Wg3F2Y9iE9mRC

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ddf09f94dbcce65caa5c0b834503ca50_NeikiAnalytics

    • Size

      198KB

    • MD5

      ddf09f94dbcce65caa5c0b834503ca50

    • SHA1

      5b7b7860181561d2c6d2816b4923cd695e310361

    • SHA256

      5de75757ce193486ad624d356b5fe489d8bd31ef6a9a5645a2bb68cb69c601ef

    • SHA512

      9108ed081e924c9e69e6005af3d72353d8ddbdb510b93155fda990512c600d1c83fa48b870935e3a31c23db16d9c8bb9159d8920cf854769a59d9aeff4a27fc6

    • SSDEEP

      3072:UhOmTsF93UYfwC6GIoutmm6tAjGIs3Fv9KdYGUSy3ByE9muRKC:Ucm4FmowdHoSmm6Wg3F2Y9iE9mRC

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks