Overview

overview

10

Static

static

3

1df23a1c67...cs.exe

windows7-x64

10

1df23a1c67...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1df23a1c674df8907efce94ad1e27ed97aa19e5290ccf65966478916f2732aa1_NeikiAnalytics

  • Size

    335KB

  • Sample

    240521-jprbsade24

  • MD5

    e1757d743b01fddf39ac30c69ee49d90

  • SHA1

    e7b9936dd27f2a82b27e293c57fd1cf821b069f4

  • SHA256

    1df23a1c674df8907efce94ad1e27ed97aa19e5290ccf65966478916f2732aa1

  • SHA512

    9d3d1446fa000a23566156de48d01ca339b07dae2f3c540720d65c0762330aec549c8c608118cdacc73822882cb45998ec58cbf516be0198392768e1ee0cba8b

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LCgnilBxBqwZK2q6sYTsmZDSFdBE0rXE4efT:n3C9BRo/CEilXBG2qZSlSFdBXExT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1df23a1c674df8907efce94ad1e27ed97aa19e5290ccf65966478916f2732aa1_NeikiAnalytics

    • Size

      335KB

    • MD5

      e1757d743b01fddf39ac30c69ee49d90

    • SHA1

      e7b9936dd27f2a82b27e293c57fd1cf821b069f4

    • SHA256

      1df23a1c674df8907efce94ad1e27ed97aa19e5290ccf65966478916f2732aa1

    • SHA512

      9d3d1446fa000a23566156de48d01ca339b07dae2f3c540720d65c0762330aec549c8c608118cdacc73822882cb45998ec58cbf516be0198392768e1ee0cba8b

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LCgnilBxBqwZK2q6sYTsmZDSFdBE0rXE4efT:n3C9BRo/CEilXBG2qZSlSFdBXExT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks