Overview

overview

10

Static

static

3

24ac234137...cs.exe

windows7-x64

10

24ac234137...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24ac2341375c9550d2984281bcf9b990_NeikiAnalytics.exe

  • Size

    68KB

  • Sample

    240518-3jgd6sed42

  • MD5

    24ac2341375c9550d2984281bcf9b990

  • SHA1

    0e668d664789425b19ca905fe6032c55649938c2

  • SHA256

    f94084549bd8f903a0a2f65cd9b20dfcf6d7cf0b2a611a37e721d16aae58d912

  • SHA512

    f502e52e898f1d4086892c0b73d120f579eacef148a086f1d43ed72f5680708b033bb2ebe63c182b88ad616384807d9a9e120232c088c191d2b833ab81eec3e5

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89r:ymb3NkkiQ3mdBjFIvl358nLA89r

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      24ac2341375c9550d2984281bcf9b990_NeikiAnalytics.exe

    • Size

      68KB

    • MD5

      24ac2341375c9550d2984281bcf9b990

    • SHA1

      0e668d664789425b19ca905fe6032c55649938c2

    • SHA256

      f94084549bd8f903a0a2f65cd9b20dfcf6d7cf0b2a611a37e721d16aae58d912

    • SHA512

      f502e52e898f1d4086892c0b73d120f579eacef148a086f1d43ed72f5680708b033bb2ebe63c182b88ad616384807d9a9e120232c088c191d2b833ab81eec3e5

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89r:ymb3NkkiQ3mdBjFIvl358nLA89r

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks