Overview

overview

10

Static

static

3

17913a09da...cs.exe

windows7-x64

10

17913a09da...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17913a09da67b804e3269fcae991e100_NeikiAnalytics.exe

  • Size

    480KB

  • Sample

    240518-2nlc9abh3t

  • MD5

    17913a09da67b804e3269fcae991e100

  • SHA1

    fb8d7c47f814d0874de0cba963693380e2bf394f

  • SHA256

    d95ecece1574b472b73f3d01040f6f8acd8cee7c7bdf5771ef1386c4b227f1ce

  • SHA512

    d9ec49084bf16fe44036b2fa7fdda3bc9305b2855678cdbcd4fb09428fcdbd02fef38f36fe49c76238a184970ce371f682abbcaf6b949c538cd088767cff324d

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2FezL:Su326p0aroZt0sL

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      17913a09da67b804e3269fcae991e100_NeikiAnalytics.exe

    • Size

      480KB

    • MD5

      17913a09da67b804e3269fcae991e100

    • SHA1

      fb8d7c47f814d0874de0cba963693380e2bf394f

    • SHA256

      d95ecece1574b472b73f3d01040f6f8acd8cee7c7bdf5771ef1386c4b227f1ce

    • SHA512

      d9ec49084bf16fe44036b2fa7fdda3bc9305b2855678cdbcd4fb09428fcdbd02fef38f36fe49c76238a184970ce371f682abbcaf6b949c538cd088767cff324d

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2FezL:Su326p0aroZt0sL

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks