Overview

overview

10

Static

static

7

e3237ec00c...cs.exe

windows7-x64

10

e3237ec00c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3237ec00c4ed0f69bdb032345362260_NeikiAnalytics

  • Size

    58KB

  • Sample

    240516-strmsaah5y

  • MD5

    e3237ec00c4ed0f69bdb032345362260

  • SHA1

    71f8db1cf626661167fdc8233685ae578b2fe5e1

  • SHA256

    2c5a83e71d498dbd46e00adab5bdf8bb0f82d8c7717e2fd2098b9d649ccbdd0a

  • SHA512

    4d068487d4787dee168341db076bd3087bdffe70d1271429c20bae3d5fc000c92c5851f5b06dd6c4a16e68d72de1d779c8f9cea3bd354b2706372253d6aebbe5

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPhbMiFH:zhOmTsF93UYfwC6GIoutiTm5hIiFH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e3237ec00c4ed0f69bdb032345362260_NeikiAnalytics

    • Size

      58KB

    • MD5

      e3237ec00c4ed0f69bdb032345362260

    • SHA1

      71f8db1cf626661167fdc8233685ae578b2fe5e1

    • SHA256

      2c5a83e71d498dbd46e00adab5bdf8bb0f82d8c7717e2fd2098b9d649ccbdd0a

    • SHA512

      4d068487d4787dee168341db076bd3087bdffe70d1271429c20bae3d5fc000c92c5851f5b06dd6c4a16e68d72de1d779c8f9cea3bd354b2706372253d6aebbe5

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPhbMiFH:zhOmTsF93UYfwC6GIoutiTm5hIiFH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks