Overview

overview

10

Static

static

7

09d4d01957...cs.exe

windows7-x64

10

09d4d01957...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09d4d01957777e9fa642626b5e7de3a93181c303e36e7e6cc139180e99daef7d_NeikiAnalytics

  • Size

    173KB

  • Sample

    240521-gldkeafg39

  • MD5

    af95a95fcb7a3b67c9f37fb1a5e91420

  • SHA1

    65c4c88f70a9e97f263902ed08161e0753eef85b

  • SHA256

    09d4d01957777e9fa642626b5e7de3a93181c303e36e7e6cc139180e99daef7d

  • SHA512

    df4dffc5eaf7bec33797045e7008869d88d0df7b9e60b867c4a575e46cccb828de45f570c55015f87d3fb2801775ca63e356f4109f91463f30bff557b59a50e5

  • SSDEEP

    3072:6hOmTsF93UYfwC6GIoutQ0tSe5yLpcka62c+8+dRNN7Yk+6C2We:6cm4FmowdHoSQ0tH6lCXb7Ybe

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      09d4d01957777e9fa642626b5e7de3a93181c303e36e7e6cc139180e99daef7d_NeikiAnalytics

    • Size

      173KB

    • MD5

      af95a95fcb7a3b67c9f37fb1a5e91420

    • SHA1

      65c4c88f70a9e97f263902ed08161e0753eef85b

    • SHA256

      09d4d01957777e9fa642626b5e7de3a93181c303e36e7e6cc139180e99daef7d

    • SHA512

      df4dffc5eaf7bec33797045e7008869d88d0df7b9e60b867c4a575e46cccb828de45f570c55015f87d3fb2801775ca63e356f4109f91463f30bff557b59a50e5

    • SSDEEP

      3072:6hOmTsF93UYfwC6GIoutQ0tSe5yLpcka62c+8+dRNN7Yk+6C2We:6cm4FmowdHoSQ0tH6lCXb7Ybe

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks