Overview

overview

10

Static

static

3

156affeb13...cs.exe

windows7-x64

10

156affeb13...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    156affeb13b6923dec4d6efeede62e40_NeikiAnalytics.exe

  • Size

    306KB

  • Sample

    240518-2jn9cabe81

  • MD5

    156affeb13b6923dec4d6efeede62e40

  • SHA1

    44830f69ea974a16757cc1f9345b070dce35a977

  • SHA256

    a0d919c02abc9022a99a3cd3e2df5823eaea0c3e501728d97438953efaf4928e

  • SHA512

    24082e38c5c3ea77d8bbe12cbcc7837192cefbfaba028597d0cfd0a8a419974841aeaa7fbb10899278428822e60db43e128acbde6df10fb579ecc9e699ea9343

  • SSDEEP

    6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwNW:n3C9uDVOXLmHBKWyn+PgvuW

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      156affeb13b6923dec4d6efeede62e40_NeikiAnalytics.exe

    • Size

      306KB

    • MD5

      156affeb13b6923dec4d6efeede62e40

    • SHA1

      44830f69ea974a16757cc1f9345b070dce35a977

    • SHA256

      a0d919c02abc9022a99a3cd3e2df5823eaea0c3e501728d97438953efaf4928e

    • SHA512

      24082e38c5c3ea77d8bbe12cbcc7837192cefbfaba028597d0cfd0a8a419974841aeaa7fbb10899278428822e60db43e128acbde6df10fb579ecc9e699ea9343

    • SSDEEP

      6144:n3C9BRo/AIuuOthLmH403Pyr6UWO6jUl7sPgvwNW:n3C9uDVOXLmHBKWyn+PgvuW

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks