Overview

overview

10

Static

static

7

c8c59e3509...cs.exe

windows7-x64

10

c8c59e3509...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8c59e350928df9e3209e554cf37d960_NeikiAnalytics.exe

  • Size

    103KB

  • Sample

    240517-htazxsef7t

  • MD5

    c8c59e350928df9e3209e554cf37d960

  • SHA1

    b436b34dad3050c51d198016fbc9d46dc2abab09

  • SHA256

    9f4c0a006764c30e052bdadf5af78af2efb42fd29010d822c9f9b262c0df274f

  • SHA512

    c3b935321ac59e65983c80569ed04094e53f70e06c34e4001c5bf6938d2e1b49c1e0f5484f9424628163806675fa4a160b4b3f1d288a4cb064e15511ea2055eb

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw5Ivov1d3ZdpQm6hL:9hOmTsF93UYfwC6GIoutz5yLpRDN6hL

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      c8c59e350928df9e3209e554cf37d960_NeikiAnalytics.exe

    • Size

      103KB

    • MD5

      c8c59e350928df9e3209e554cf37d960

    • SHA1

      b436b34dad3050c51d198016fbc9d46dc2abab09

    • SHA256

      9f4c0a006764c30e052bdadf5af78af2efb42fd29010d822c9f9b262c0df274f

    • SHA512

      c3b935321ac59e65983c80569ed04094e53f70e06c34e4001c5bf6938d2e1b49c1e0f5484f9424628163806675fa4a160b4b3f1d288a4cb064e15511ea2055eb

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw5Ivov1d3ZdpQm6hL:9hOmTsF93UYfwC6GIoutz5yLpRDN6hL

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks