Overview

overview

10

Static

static

3

13ccedd2f1...cs.exe

windows7-x64

10

13ccedd2f1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13ccedd2f14485d2851a68ccff464f84faa45d3b2b5cebd045e16d4dbf6b47a7_NeikiAnalytics

  • Size

    480KB

  • Sample

    240521-hlrygabh33

  • MD5

    bdf8e9336f08d504a96e6a17fe3ceef0

  • SHA1

    9e52db39105ce762b2a60f24939763274f547846

  • SHA256

    13ccedd2f14485d2851a68ccff464f84faa45d3b2b5cebd045e16d4dbf6b47a7

  • SHA512

    b947047a686ec0cbb4f84c85e27e84c9f6aff46cd0572162bed82eb26ca3dfb783326bc9b790f5a875f6140fb41eb3a3361b97966517460906fe8de4a59e171d

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fezt:Su326p0aroZt0st

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      13ccedd2f14485d2851a68ccff464f84faa45d3b2b5cebd045e16d4dbf6b47a7_NeikiAnalytics

    • Size

      480KB

    • MD5

      bdf8e9336f08d504a96e6a17fe3ceef0

    • SHA1

      9e52db39105ce762b2a60f24939763274f547846

    • SHA256

      13ccedd2f14485d2851a68ccff464f84faa45d3b2b5cebd045e16d4dbf6b47a7

    • SHA512

      b947047a686ec0cbb4f84c85e27e84c9f6aff46cd0572162bed82eb26ca3dfb783326bc9b790f5a875f6140fb41eb3a3361b97966517460906fe8de4a59e171d

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fezt:Su326p0aroZt0st

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks