Overview

overview

10

Static

static

3

3b75fa54ab...cs.exe

windows7-x64

10

3b75fa54ab...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b75fa54abff377d32256516b3095dcb7675afaf8ed10cbbad687aa88cecb5a7_NeikiAnalytics

  • Size

    60KB

  • Sample

    240521-m3qtysba77

  • MD5

    24a89a129c4deffa87ab599a210fe020

  • SHA1

    dd8d8921c27b5f63297d2ea40ed9e44829db287b

  • SHA256

    3b75fa54abff377d32256516b3095dcb7675afaf8ed10cbbad687aa88cecb5a7

  • SHA512

    a7614137dbd36676d0112d428a0e805e078a0ff38b4d9bef194991d5a1242832c58fd35ea88b3b542b08df8767bfcc47eee50c008166e051d5d83b742ceb4c34

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+y:ymb3NkkiQ3mdBjF0y7y

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      3b75fa54abff377d32256516b3095dcb7675afaf8ed10cbbad687aa88cecb5a7_NeikiAnalytics

    • Size

      60KB

    • MD5

      24a89a129c4deffa87ab599a210fe020

    • SHA1

      dd8d8921c27b5f63297d2ea40ed9e44829db287b

    • SHA256

      3b75fa54abff377d32256516b3095dcb7675afaf8ed10cbbad687aa88cecb5a7

    • SHA512

      a7614137dbd36676d0112d428a0e805e078a0ff38b4d9bef194991d5a1242832c58fd35ea88b3b542b08df8767bfcc47eee50c008166e051d5d83b742ceb4c34

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+y:ymb3NkkiQ3mdBjF0y7y

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks