Overview

overview

10

Static

static

7

0debf3fa93...cs.exe

windows7-x64

10

0debf3fa93...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0debf3fa935dbda8f4141c6e44c9323c00f99d90f8ab6ab6a823446723f5329e_NeikiAnalytics

  • Size

    339KB

  • Sample

    240521-g1bz5aba4y

  • MD5

    2f6c44a040eacda9b01cce027cd8464c

  • SHA1

    7db2d8c1491495de97950eaf24fbbbff9c03c1cb

  • SHA256

    0debf3fa935dbda8f4141c6e44c9323c00f99d90f8ab6ab6a823446723f5329e

  • SHA512

    3a06900178a1ac7f94ac7aa65e8718ad2c5bff4a4fe7c6b5b7c7a2be390733b427b9ddcce11e7df8057636a81e5ca40819e1c9e26500680c68ca5ab30512d7d0

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiF:9cm4FmowdHoS4BtguSPKyHF

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0debf3fa935dbda8f4141c6e44c9323c00f99d90f8ab6ab6a823446723f5329e_NeikiAnalytics

    • Size

      339KB

    • MD5

      2f6c44a040eacda9b01cce027cd8464c

    • SHA1

      7db2d8c1491495de97950eaf24fbbbff9c03c1cb

    • SHA256

      0debf3fa935dbda8f4141c6e44c9323c00f99d90f8ab6ab6a823446723f5329e

    • SHA512

      3a06900178a1ac7f94ac7aa65e8718ad2c5bff4a4fe7c6b5b7c7a2be390733b427b9ddcce11e7df8057636a81e5ca40819e1c9e26500680c68ca5ab30512d7d0

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiF:9cm4FmowdHoS4BtguSPKyHF

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks