Overview

overview

10

Static

static

7

545c3bc631...cs.exe

windows7-x64

10

545c3bc631...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    545c3bc63113877b39d2ddf6bcea5537e1705d596fee1680fb0828d6b37cbda3_NeikiAnalytics

  • Size

    58KB

  • Sample

    240521-qlsh1afc64

  • MD5

    94426ab1c7e17436a60390a391baba00

  • SHA1

    c8437ea7edf6ee91c8e48259e0c89e08e3d40875

  • SHA256

    545c3bc63113877b39d2ddf6bcea5537e1705d596fee1680fb0828d6b37cbda3

  • SHA512

    5b46e331ee10531519a733f217fe577bcc62018d3cda1e834c393a1f389597038e6b326d34fe08c75228b60b123db934b5ad104042d9f9aac08f374661676775

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJ9OJc3n:zhOmTsF93UYfwC6GIoutiTmm+n

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      545c3bc63113877b39d2ddf6bcea5537e1705d596fee1680fb0828d6b37cbda3_NeikiAnalytics

    • Size

      58KB

    • MD5

      94426ab1c7e17436a60390a391baba00

    • SHA1

      c8437ea7edf6ee91c8e48259e0c89e08e3d40875

    • SHA256

      545c3bc63113877b39d2ddf6bcea5537e1705d596fee1680fb0828d6b37cbda3

    • SHA512

      5b46e331ee10531519a733f217fe577bcc62018d3cda1e834c393a1f389597038e6b326d34fe08c75228b60b123db934b5ad104042d9f9aac08f374661676775

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJ9OJc3n:zhOmTsF93UYfwC6GIoutiTmm+n

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks