Overview

overview

10

Static

static

3

323825cd6d...cs.exe

windows7-x64

10

323825cd6d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    323825cd6d0fd6f5ba630760cc43f3a2b8c02dcee7c58ace0acb09fd07fc9b34_NeikiAnalytics

  • Size

    389KB

  • Sample

    240521-l3r7cahd55

  • MD5

    d46a6b3aac7717a3a24e7756ce0ee5d0

  • SHA1

    4291f2e96f04511262f6ba6af85ca14d5cfdbffa

  • SHA256

    323825cd6d0fd6f5ba630760cc43f3a2b8c02dcee7c58ace0acb09fd07fc9b34

  • SHA512

    bd6f5741998253ea1c6cf1125689e487df24ed29b2db813ec803335dc6947ab5b11f28c973d4b48d6be6132eb539b206366c79c46eecee1ba6444e3af0aadf0b

  • SSDEEP

    6144:Acm7ImGddX5WrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmi:m7TcJWjdpKGATTk/jYIOWN/KnnPT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      323825cd6d0fd6f5ba630760cc43f3a2b8c02dcee7c58ace0acb09fd07fc9b34_NeikiAnalytics

    • Size

      389KB

    • MD5

      d46a6b3aac7717a3a24e7756ce0ee5d0

    • SHA1

      4291f2e96f04511262f6ba6af85ca14d5cfdbffa

    • SHA256

      323825cd6d0fd6f5ba630760cc43f3a2b8c02dcee7c58ace0acb09fd07fc9b34

    • SHA512

      bd6f5741998253ea1c6cf1125689e487df24ed29b2db813ec803335dc6947ab5b11f28c973d4b48d6be6132eb539b206366c79c46eecee1ba6444e3af0aadf0b

    • SSDEEP

      6144:Acm7ImGddX5WrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmi:m7TcJWjdpKGATTk/jYIOWN/KnnPT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks