Overview

overview

10

Static

static

7

23f48615b9...cs.exe

windows7-x64

10

23f48615b9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23f48615b9bf1c093d1b316bf6804020_NeikiAnalytics.exe

  • Size

    339KB

  • Sample

    240518-3g6ahsea2y

  • MD5

    23f48615b9bf1c093d1b316bf6804020

  • SHA1

    9c08afd2d257abe65a9bf87bd213cc9480b8ddcd

  • SHA256

    940e2ac56b52b74870b773340cfc49479952feda5b2efda9bb66db9f3e4eb6bf

  • SHA512

    32e5b4460626324d8e4f2a81645ecef052b9348ffab46e5ce5eb615e0aae52fc8b3ee529eee19285a4554a63990c5e26988891b28eb2674be5b2fb943e98bea7

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiI:9cm4FmowdHoS4BtguSPKyHI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      23f48615b9bf1c093d1b316bf6804020_NeikiAnalytics.exe

    • Size

      339KB

    • MD5

      23f48615b9bf1c093d1b316bf6804020

    • SHA1

      9c08afd2d257abe65a9bf87bd213cc9480b8ddcd

    • SHA256

      940e2ac56b52b74870b773340cfc49479952feda5b2efda9bb66db9f3e4eb6bf

    • SHA512

      32e5b4460626324d8e4f2a81645ecef052b9348ffab46e5ce5eb615e0aae52fc8b3ee529eee19285a4554a63990c5e26988891b28eb2674be5b2fb943e98bea7

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiI:9cm4FmowdHoS4BtguSPKyHI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks