Overview

overview

10

Static

static

3

17a8bca640...cs.exe

windows7-x64

10

17a8bca640...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17a8bca640313961bbba298b73eb2a70_NeikiAnalytics.exe

  • Size

    393KB

  • Sample

    240518-2npqnsbh3z

  • MD5

    17a8bca640313961bbba298b73eb2a70

  • SHA1

    85e3006daf2f89773cdb7dec7d4a86d2e8e24ced

  • SHA256

    b828ffdfb27b47247674c5cfb1bf7be82e86b234ba16ca6c3cda3b69d53c0c65

  • SHA512

    95bb9d9deea91279ef84570e82b23a29c296625e178286997a53ada83bcb67cc9e2842e2408fb4da9d35661939f1a29b832cd2d4cb282fcdd81af8b0223610d3

  • SSDEEP

    6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu/i:n3C9ytvngQjZbz+xt4vFBq

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      17a8bca640313961bbba298b73eb2a70_NeikiAnalytics.exe

    • Size

      393KB

    • MD5

      17a8bca640313961bbba298b73eb2a70

    • SHA1

      85e3006daf2f89773cdb7dec7d4a86d2e8e24ced

    • SHA256

      b828ffdfb27b47247674c5cfb1bf7be82e86b234ba16ca6c3cda3b69d53c0c65

    • SHA512

      95bb9d9deea91279ef84570e82b23a29c296625e178286997a53ada83bcb67cc9e2842e2408fb4da9d35661939f1a29b832cd2d4cb282fcdd81af8b0223610d3

    • SSDEEP

      6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu/i:n3C9ytvngQjZbz+xt4vFBq

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks