Overview

overview

10

Static

static

7

e1b69d622f...cs.exe

windows7-x64

10

e1b69d622f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1b69d622fcd96591d3cdbf3478e36a0_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240517-kqyb6aab3y

  • MD5

    e1b69d622fcd96591d3cdbf3478e36a0

  • SHA1

    c8104f1f415b62576cfc2beae900ea294e8a8dca

  • SHA256

    050a22a67e3789702194836263945a590122789d38330d8b6d14888cc040e5e6

  • SHA512

    7d1d60cb590850792943bedd6f120690668095f6e06581128789ddd9c2f2bb252f0732c355c574b647b0b16036adac30edaab8829159638bb2d3c1fc64bdb30a

  • SSDEEP

    1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXN8dI4I9c1CLcxdw/K:khOmTsF93UYfwC6GIoutpYHrgow/K

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e1b69d622fcd96591d3cdbf3478e36a0_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      e1b69d622fcd96591d3cdbf3478e36a0

    • SHA1

      c8104f1f415b62576cfc2beae900ea294e8a8dca

    • SHA256

      050a22a67e3789702194836263945a590122789d38330d8b6d14888cc040e5e6

    • SHA512

      7d1d60cb590850792943bedd6f120690668095f6e06581128789ddd9c2f2bb252f0732c355c574b647b0b16036adac30edaab8829159638bb2d3c1fc64bdb30a

    • SSDEEP

      1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXN8dI4I9c1CLcxdw/K:khOmTsF93UYfwC6GIoutpYHrgow/K

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks