Overview

overview

10

Static

static

7

5482fb1cb3...cs.exe

windows7-x64

10

5482fb1cb3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5482fb1cb32b170d5d992f4291d60b731f6a3b1dcf83ad32c810ff7de95b1f20_NeikiAnalytics

  • Size

    114KB

  • Sample

    240521-qmlf3sfd8w

  • MD5

    f50f633566efa86b028cf97908a33fc0

  • SHA1

    be20df94fe090b45d0b809973173dd1b581e0b36

  • SHA256

    5482fb1cb32b170d5d992f4291d60b731f6a3b1dcf83ad32c810ff7de95b1f20

  • SHA512

    76dd8141291f28e3d1c1c0d8ed8d0c508a0cfb135a93ad50a76ed0ef2cfcd4d30dd2eb9e0eac9b56d0e54e68c747752087d0946eb764fd460f2b3916f9a8dec9

  • SSDEEP

    3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1U+a88r:ccm4FmowdHoS5ddWX+a1

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5482fb1cb32b170d5d992f4291d60b731f6a3b1dcf83ad32c810ff7de95b1f20_NeikiAnalytics

    • Size

      114KB

    • MD5

      f50f633566efa86b028cf97908a33fc0

    • SHA1

      be20df94fe090b45d0b809973173dd1b581e0b36

    • SHA256

      5482fb1cb32b170d5d992f4291d60b731f6a3b1dcf83ad32c810ff7de95b1f20

    • SHA512

      76dd8141291f28e3d1c1c0d8ed8d0c508a0cfb135a93ad50a76ed0ef2cfcd4d30dd2eb9e0eac9b56d0e54e68c747752087d0946eb764fd460f2b3916f9a8dec9

    • SSDEEP

      3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1U+a88r:ccm4FmowdHoS5ddWX+a1

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks