Overview

overview

10

Static

static

3

977ff72bdc...cs.exe

windows7-x64

10

977ff72bdc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    977ff72bdcdceee1ffd219b0a9d092b0_NeikiAnalytics.exe

  • Size

    91KB

  • Sample

    240518-f4epradf7s

  • MD5

    977ff72bdcdceee1ffd219b0a9d092b0

  • SHA1

    d7cf810c6ad9e039dcf2c20af34f7ab7599a1762

  • SHA256

    dbbd14369d13561b31353c431cb2a5eb43ece4871919fc8a7ac41d9ea10840b7

  • SHA512

    f6daced375a2b77f64d45f26b1e1158f79894c72d996a627a9a05df41715cf5dedcfb009676862f6d290e0bfaaea8e4660744a830935624d55bf213827a510f6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzac0Hobv0byLufTJfJVV:ymb3NkkiQ3mdBjFodt27HobvcyLufNf5

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      977ff72bdcdceee1ffd219b0a9d092b0_NeikiAnalytics.exe

    • Size

      91KB

    • MD5

      977ff72bdcdceee1ffd219b0a9d092b0

    • SHA1

      d7cf810c6ad9e039dcf2c20af34f7ab7599a1762

    • SHA256

      dbbd14369d13561b31353c431cb2a5eb43ece4871919fc8a7ac41d9ea10840b7

    • SHA512

      f6daced375a2b77f64d45f26b1e1158f79894c72d996a627a9a05df41715cf5dedcfb009676862f6d290e0bfaaea8e4660744a830935624d55bf213827a510f6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzac0Hobv0byLufTJfJVV:ymb3NkkiQ3mdBjFodt27HobvcyLufNf5

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks