Overview

overview

10

Static

static

3

382b620c65...cs.exe

windows7-x64

10

382b620c65...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    382b620c651d04179b699c6a03f88082da2e72508ab75f301955264cfd92d246_NeikiAnalytics

  • Size

    78KB

  • Sample

    240521-mqxrqsae32

  • MD5

    bc54936727de39b29b9292143573a770

  • SHA1

    62a800f13f20a87127dd6a38d22c1fdcdfadee5c

  • SHA256

    382b620c651d04179b699c6a03f88082da2e72508ab75f301955264cfd92d246

  • SHA512

    3155f2c6ad7499a56cd28962b588f10fc873ac3defa6513709ef7fcd667e248cad16c48c8b42eb5e43494b304c91740aa6246baad4b69d119cb94f5b069018fe

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIYgC/KSLJEd2aQ:ymb3NkkiQ3mdBjFI3eFC/Q

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      382b620c651d04179b699c6a03f88082da2e72508ab75f301955264cfd92d246_NeikiAnalytics

    • Size

      78KB

    • MD5

      bc54936727de39b29b9292143573a770

    • SHA1

      62a800f13f20a87127dd6a38d22c1fdcdfadee5c

    • SHA256

      382b620c651d04179b699c6a03f88082da2e72508ab75f301955264cfd92d246

    • SHA512

      3155f2c6ad7499a56cd28962b588f10fc873ac3defa6513709ef7fcd667e248cad16c48c8b42eb5e43494b304c91740aa6246baad4b69d119cb94f5b069018fe

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIYgC/KSLJEd2aQ:ymb3NkkiQ3mdBjFI3eFC/Q

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks