Overview

overview

10

Static

static

7

57eb67bb8a...cs.exe

windows7-x64

10

57eb67bb8a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57eb67bb8ac091aa44125f887dce308898fa16a04cdab2e2f51be3fbaed3b027_NeikiAnalytics

  • Size

    75KB

  • Sample

    240521-qy1p5sfh46

  • MD5

    ff86d0b17f550b2a583517a1974eb240

  • SHA1

    3454c165e9bf13d4eed5ba0d38dbe73bd7485ede

  • SHA256

    57eb67bb8ac091aa44125f887dce308898fa16a04cdab2e2f51be3fbaed3b027

  • SHA512

    dc9e84a43b55da08893ee5941337c47ee8aee7725a3479bb3c6913ec49a9aafcff189349bd3af560ea0787a31d3251a2bd1326f71c3eb9a9a090699cb7456f8c

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8s:9hOmTsF93UYfwC6GIoutz5yLpOSDu

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      57eb67bb8ac091aa44125f887dce308898fa16a04cdab2e2f51be3fbaed3b027_NeikiAnalytics

    • Size

      75KB

    • MD5

      ff86d0b17f550b2a583517a1974eb240

    • SHA1

      3454c165e9bf13d4eed5ba0d38dbe73bd7485ede

    • SHA256

      57eb67bb8ac091aa44125f887dce308898fa16a04cdab2e2f51be3fbaed3b027

    • SHA512

      dc9e84a43b55da08893ee5941337c47ee8aee7725a3479bb3c6913ec49a9aafcff189349bd3af560ea0787a31d3251a2bd1326f71c3eb9a9a090699cb7456f8c

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8s:9hOmTsF93UYfwC6GIoutz5yLpOSDu

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks