Overview

overview

10

Static

static

3

4ed4e7b131...cs.exe

windows7-x64

10

4ed4e7b131...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ed4e7b131d6192cdce6dfd699c96e8cca6e33f58c89a49ef14f8564048235fc_NeikiAnalytics

  • Size

    75KB

  • Sample

    240521-p3y7faee7t

  • MD5

    fdb7ab0849fe756d2299e1bad7a70860

  • SHA1

    0463f0758f7781dca1ec0e13db852e08a4972bf1

  • SHA256

    4ed4e7b131d6192cdce6dfd699c96e8cca6e33f58c89a49ef14f8564048235fc

  • SHA512

    257c70203e61ca15986895b7fe6371be68b0b4f378372b330cbd754cf3ec87a86bf5c2b9c46e2abf880cc2331cdebe09390cfac4d50e8292373fe292207ae68a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rIN0:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuG

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      4ed4e7b131d6192cdce6dfd699c96e8cca6e33f58c89a49ef14f8564048235fc_NeikiAnalytics

    • Size

      75KB

    • MD5

      fdb7ab0849fe756d2299e1bad7a70860

    • SHA1

      0463f0758f7781dca1ec0e13db852e08a4972bf1

    • SHA256

      4ed4e7b131d6192cdce6dfd699c96e8cca6e33f58c89a49ef14f8564048235fc

    • SHA512

      257c70203e61ca15986895b7fe6371be68b0b4f378372b330cbd754cf3ec87a86bf5c2b9c46e2abf880cc2331cdebe09390cfac4d50e8292373fe292207ae68a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rIN0:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuG

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks