Overview

overview

10

Static

static

3

18f36b0a18...cs.exe

windows7-x64

10

18f36b0a18...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18f36b0a187b1cc0d0d53845d2bc2090NeikiAnalytics.exe

  • Size

    306KB

  • Sample

    240527-zdjessad95

  • MD5

    18f36b0a187b1cc0d0d53845d2bc2090

  • SHA1

    edd81614f44930665a75a5a8335549c362ae2090

  • SHA256

    bc69da80983e37d6636f3afec6a3316f13730e864c635a38979ca0d971c17e44

  • SHA512

    5b3083af89e027e03073728e03c6f0a662bc40a7a3b44de54709cfc55a87208c736a6b3134f32fd5f371c228de31699212c5d7cb13176b67e6b8caea8e6de8cf

  • SSDEEP

    6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2va:n3C9uUnAvtd3Ogld2va

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      18f36b0a187b1cc0d0d53845d2bc2090NeikiAnalytics.exe

    • Size

      306KB

    • MD5

      18f36b0a187b1cc0d0d53845d2bc2090

    • SHA1

      edd81614f44930665a75a5a8335549c362ae2090

    • SHA256

      bc69da80983e37d6636f3afec6a3316f13730e864c635a38979ca0d971c17e44

    • SHA512

      5b3083af89e027e03073728e03c6f0a662bc40a7a3b44de54709cfc55a87208c736a6b3134f32fd5f371c228de31699212c5d7cb13176b67e6b8caea8e6de8cf

    • SSDEEP

      6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2va:n3C9uUnAvtd3Ogld2va

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks