Overview

overview

10

Static

static

3

17215ff13d...cs.exe

windows7-x64

10

17215ff13d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17215ff13d706a528409995e9673e6c5cdaef2a3accdbc97744ca4491618d036_NeikiAnalytics

  • Size

    480KB

  • Sample

    240521-hzw5cacd73

  • MD5

    d3ce7ec0c2004343ee93cd0a698697b0

  • SHA1

    f79a7eb1d2a5ab6817d03d57a1c10b18324847b1

  • SHA256

    17215ff13d706a528409995e9673e6c5cdaef2a3accdbc97744ca4491618d036

  • SHA512

    2ff2bc8067d64388dae307f4013b0e5fb513f29cb54f2b47489b6e572453e06b820a9d720a2452f6c60063c61ac3ac5e91255e29b8d753e12b50d965c0176e66

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fezh:Su326p0aroZt0sh

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      17215ff13d706a528409995e9673e6c5cdaef2a3accdbc97744ca4491618d036_NeikiAnalytics

    • Size

      480KB

    • MD5

      d3ce7ec0c2004343ee93cd0a698697b0

    • SHA1

      f79a7eb1d2a5ab6817d03d57a1c10b18324847b1

    • SHA256

      17215ff13d706a528409995e9673e6c5cdaef2a3accdbc97744ca4491618d036

    • SHA512

      2ff2bc8067d64388dae307f4013b0e5fb513f29cb54f2b47489b6e572453e06b820a9d720a2452f6c60063c61ac3ac5e91255e29b8d753e12b50d965c0176e66

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fezh:Su326p0aroZt0sh

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks