Overview

overview

10

Static

static

3

c0abbc78b2...cs.exe

windows7-x64

10

c0abbc78b2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0abbc78b27341421f7e8b8c1c3ed9b0_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240519-pystvshg2v

  • MD5

    c0abbc78b27341421f7e8b8c1c3ed9b0

  • SHA1

    b02f34d50ed44ae75c332ebdc1eba39ac1e4d192

  • SHA256

    ab65721a4046792ee9ef62753da7b98733cca75a9d9db882429acfa2f3b28d63

  • SHA512

    dc032f2f811adfa87334bbfaa133eede3e56add14172efe0d5b4f218e26f4ebdca45867abc06c7db4a0187c35283eaa3b26d5c9c320f233d1bb5dbac5b794522

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/21A:ymb3NkkiQ3mdBjFo73PYP1lri3K8Gm

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c0abbc78b27341421f7e8b8c1c3ed9b0_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      c0abbc78b27341421f7e8b8c1c3ed9b0

    • SHA1

      b02f34d50ed44ae75c332ebdc1eba39ac1e4d192

    • SHA256

      ab65721a4046792ee9ef62753da7b98733cca75a9d9db882429acfa2f3b28d63

    • SHA512

      dc032f2f811adfa87334bbfaa133eede3e56add14172efe0d5b4f218e26f4ebdca45867abc06c7db4a0187c35283eaa3b26d5c9c320f233d1bb5dbac5b794522

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/21A:ymb3NkkiQ3mdBjFo73PYP1lri3K8Gm

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks