Overview

overview

10

Static

static

3

423ef5895c...cs.exe

windows7-x64

10

423ef5895c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    423ef5895c5425f4adc62778d383277dedee234499182b8f6ff1c5fbe5366031_NeikiAnalytics

  • Size

    64KB

  • Sample

    240521-nt6pgscd36

  • MD5

    995fbd6e176e7b01a4b7c01fa4d4dfa0

  • SHA1

    28ac9f6ba3a392a557b3abadbcd4ab0526f9dc00

  • SHA256

    423ef5895c5425f4adc62778d383277dedee234499182b8f6ff1c5fbe5366031

  • SHA512

    0830b6d4ff22a52872fbb5aead55fb93233fd262ff943562b895115ed596e8143eda48dbdec4a146b4716c69c6fec63dffb2431f2f9cd076ba35882b4b0e9c1f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+Luvd7:ymb3NkkiQ3mdBjF0yMlC

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      423ef5895c5425f4adc62778d383277dedee234499182b8f6ff1c5fbe5366031_NeikiAnalytics

    • Size

      64KB

    • MD5

      995fbd6e176e7b01a4b7c01fa4d4dfa0

    • SHA1

      28ac9f6ba3a392a557b3abadbcd4ab0526f9dc00

    • SHA256

      423ef5895c5425f4adc62778d383277dedee234499182b8f6ff1c5fbe5366031

    • SHA512

      0830b6d4ff22a52872fbb5aead55fb93233fd262ff943562b895115ed596e8143eda48dbdec4a146b4716c69c6fec63dffb2431f2f9cd076ba35882b4b0e9c1f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+Luvd7:ymb3NkkiQ3mdBjF0yMlC

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks