Overview

overview

10

Static

static

7

34ce548dd5...cs.exe

windows7-x64

10

34ce548dd5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34ce548dd54899dcbfe4d45befbea8349f0e6512c78e1e8e9ae126fe75a19df2_NeikiAnalytics

  • Size

    381KB

  • Sample

    240521-mb7cmahh3z

  • MD5

    e3e3d18a7a8a85711fdd0d70286e0ff0

  • SHA1

    651fc5f5f2d986bae08739c6e2216f33536496a6

  • SHA256

    34ce548dd54899dcbfe4d45befbea8349f0e6512c78e1e8e9ae126fe75a19df2

  • SHA512

    897330bdfd20e98f3f39afae075169e53d12d977d7d68e066b52224797867f09fdfa0efb6ac285abfa420b480d209be6631ec18db0e58625e8e6f529a3f23b4e

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYT7:y4wFHoS3eFaKHpNKbbswe7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      34ce548dd54899dcbfe4d45befbea8349f0e6512c78e1e8e9ae126fe75a19df2_NeikiAnalytics

    • Size

      381KB

    • MD5

      e3e3d18a7a8a85711fdd0d70286e0ff0

    • SHA1

      651fc5f5f2d986bae08739c6e2216f33536496a6

    • SHA256

      34ce548dd54899dcbfe4d45befbea8349f0e6512c78e1e8e9ae126fe75a19df2

    • SHA512

      897330bdfd20e98f3f39afae075169e53d12d977d7d68e066b52224797867f09fdfa0efb6ac285abfa420b480d209be6631ec18db0e58625e8e6f529a3f23b4e

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYT7:y4wFHoS3eFaKHpNKbbswe7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks