Overview

overview

10

Static

static

3

07299aaa9d...cs.exe

windows7-x64

10

07299aaa9d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07299aaa9d30552c0e7a01cd904c9e8f900e647edcb5edbc7e5cc338cf28e6c0_NeikiAnalytics

  • Size

    122KB

  • Sample

    240521-gcfneadf38

  • MD5

    81debe87c3f818fea900c2d804956b50

  • SHA1

    c176aa22493028b220beb24c0dab64792154b4bf

  • SHA256

    07299aaa9d30552c0e7a01cd904c9e8f900e647edcb5edbc7e5cc338cf28e6c0

  • SHA512

    5bca822cc5943f7cb99c8fac7505076cecdb4fe8fe2858729a9b5d50de937dc898803feb830ca0ba5d7adea3eb483fe0d256b7c3e511729617e8e7c474fef2db

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDomRGApSuLAR2yPBCQ1nDFu1Q8sx:ymb3NkkiQ3mdBjFomR7UsyJC+n0Gsgx

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      07299aaa9d30552c0e7a01cd904c9e8f900e647edcb5edbc7e5cc338cf28e6c0_NeikiAnalytics

    • Size

      122KB

    • MD5

      81debe87c3f818fea900c2d804956b50

    • SHA1

      c176aa22493028b220beb24c0dab64792154b4bf

    • SHA256

      07299aaa9d30552c0e7a01cd904c9e8f900e647edcb5edbc7e5cc338cf28e6c0

    • SHA512

      5bca822cc5943f7cb99c8fac7505076cecdb4fe8fe2858729a9b5d50de937dc898803feb830ca0ba5d7adea3eb483fe0d256b7c3e511729617e8e7c474fef2db

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDomRGApSuLAR2yPBCQ1nDFu1Q8sx:ymb3NkkiQ3mdBjFomR7UsyJC+n0Gsgx

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks