Overview

overview

10

Static

static

7

0a9ff6946a...cs.exe

windows7-x64

10

0a9ff6946a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a9ff6946ab34aae0f6919c584865ac55689e0b559a3f4ab8a9f1b25cd58b719_NeikiAnalytics

  • Size

    198KB

  • Sample

    240521-gnzknage25

  • MD5

    fe289044670d3d10eb901ed5c09f2810

  • SHA1

    8b164b7782627ac8c6769f8c873db74dfef99274

  • SHA256

    0a9ff6946ab34aae0f6919c584865ac55689e0b559a3f4ab8a9f1b25cd58b719

  • SHA512

    bbf83f04cbf18e02ed549130bfa4b74f999e87e5569774f7c1f9b5dd77d1af05a01cf4f75fe346a632a5f8eb6e5751b66c2049231411ed5406638110957dcec5

  • SSDEEP

    3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1uI9:xcm4FmowdHoS3WV28HCddWhRO1Lc99

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0a9ff6946ab34aae0f6919c584865ac55689e0b559a3f4ab8a9f1b25cd58b719_NeikiAnalytics

    • Size

      198KB

    • MD5

      fe289044670d3d10eb901ed5c09f2810

    • SHA1

      8b164b7782627ac8c6769f8c873db74dfef99274

    • SHA256

      0a9ff6946ab34aae0f6919c584865ac55689e0b559a3f4ab8a9f1b25cd58b719

    • SHA512

      bbf83f04cbf18e02ed549130bfa4b74f999e87e5569774f7c1f9b5dd77d1af05a01cf4f75fe346a632a5f8eb6e5751b66c2049231411ed5406638110957dcec5

    • SSDEEP

      3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1uI9:xcm4FmowdHoS3WV28HCddWhRO1Lc99

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks