Overview

overview

10

Static

static

3

a34a36fc7e...cs.exe

windows7-x64

10

a34a36fc7e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a34a36fc7e0a2bd3df136ee6e67c94a0_NeikiAnalytics.exe

  • Size

    68KB

  • Sample

    240517-epgecsgf6z

  • MD5

    a34a36fc7e0a2bd3df136ee6e67c94a0

  • SHA1

    6c941d9bac0cd3291d64e6f6a5184fa93ab9e541

  • SHA256

    c1a82bc7e1e449a93dc2e6837317c9edce4fc54cbb4ee913cf13e3bcdd0e913f

  • SHA512

    f2034273173b37ff85371915dd5995be0034a59290165a5734e448724221e03958514320c469ea365dc7245b2ed068fbb10cdd2bb64b131fea756422c6c812b4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUwcsbY/v:ymb3NkkiQ3mdBjF0yjcsM3

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a34a36fc7e0a2bd3df136ee6e67c94a0_NeikiAnalytics.exe

    • Size

      68KB

    • MD5

      a34a36fc7e0a2bd3df136ee6e67c94a0

    • SHA1

      6c941d9bac0cd3291d64e6f6a5184fa93ab9e541

    • SHA256

      c1a82bc7e1e449a93dc2e6837317c9edce4fc54cbb4ee913cf13e3bcdd0e913f

    • SHA512

      f2034273173b37ff85371915dd5995be0034a59290165a5734e448724221e03958514320c469ea365dc7245b2ed068fbb10cdd2bb64b131fea756422c6c812b4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUwcsbY/v:ymb3NkkiQ3mdBjF0yjcsM3

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks