Overview

overview

10

Static

static

7

39c9f51909...cs.exe

windows7-x64

10

39c9f51909...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39c9f5190938136c87d16ca28c6bb0082301bc9196df1f08fd37eacdc3dc2ae2_NeikiAnalytics

  • Size

    76KB

  • Sample

    240521-mwzhhsag39

  • MD5

    001dd22f05cc9796a84014b119eed8d0

  • SHA1

    1d9e22c51183b6e590083e12bee52d66fd8ce218

  • SHA256

    39c9f5190938136c87d16ca28c6bb0082301bc9196df1f08fd37eacdc3dc2ae2

  • SHA512

    0d95da7a85a59e2853087766607919cc4bca4f83898d0c04818d43244e58d0447a82fdb634bd1d311b2daafa3b4b4dff26e81b68aea96327f36961b07fe1685f

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE87N:9hOmTsF93UYfwC6GIoutz5yLpOSDRN

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      39c9f5190938136c87d16ca28c6bb0082301bc9196df1f08fd37eacdc3dc2ae2_NeikiAnalytics

    • Size

      76KB

    • MD5

      001dd22f05cc9796a84014b119eed8d0

    • SHA1

      1d9e22c51183b6e590083e12bee52d66fd8ce218

    • SHA256

      39c9f5190938136c87d16ca28c6bb0082301bc9196df1f08fd37eacdc3dc2ae2

    • SHA512

      0d95da7a85a59e2853087766607919cc4bca4f83898d0c04818d43244e58d0447a82fdb634bd1d311b2daafa3b4b4dff26e81b68aea96327f36961b07fe1685f

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE87N:9hOmTsF93UYfwC6GIoutz5yLpOSDRN

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks