Overview

overview

10

Static

static

3

54f39aebde...cs.exe

windows7-x64

10

54f39aebde...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54f39aebde61f67e7bdbe44c82ca08393c61e4048f097749d1bd37a332a7acc0_NeikiAnalytics

  • Size

    81KB

  • Sample

    240521-qn5aksfe5w

  • MD5

    025a00289948face7bdf2057c2603820

  • SHA1

    979a61b1bea376f8bae9c6c7beeecd9e622176d3

  • SHA256

    54f39aebde61f67e7bdbe44c82ca08393c61e4048f097749d1bd37a332a7acc0

  • SHA512

    4b6bcffb1a70fa9a88ea9775f0a5586ae109898eda5da9fdf5eee8224f27487cc193adeb522684a63a35875a7603c900998a634f363a493b46d0950bc6fe44e6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYS8njh:ymb3NkkiQ3mdBjFo7LAIbT6jh

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      54f39aebde61f67e7bdbe44c82ca08393c61e4048f097749d1bd37a332a7acc0_NeikiAnalytics

    • Size

      81KB

    • MD5

      025a00289948face7bdf2057c2603820

    • SHA1

      979a61b1bea376f8bae9c6c7beeecd9e622176d3

    • SHA256

      54f39aebde61f67e7bdbe44c82ca08393c61e4048f097749d1bd37a332a7acc0

    • SHA512

      4b6bcffb1a70fa9a88ea9775f0a5586ae109898eda5da9fdf5eee8224f27487cc193adeb522684a63a35875a7603c900998a634f363a493b46d0950bc6fe44e6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYS8njh:ymb3NkkiQ3mdBjFo7LAIbT6jh

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks