Overview

overview

10

Static

static

3

3e732daa70...cs.exe

windows7-x64

10

3e732daa70...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e732daa70bd1a74e3f25185d0762660_NeikiAnalytics.exe

  • Size

    128KB

  • Sample

    240519-1bcpxaag9t

  • MD5

    3e732daa70bd1a74e3f25185d0762660

  • SHA1

    262fe3937a4a15de751c568c78765ed8c1d12a94

  • SHA256

    8c6733e235b5839097ee8489a46b5b9c49366dfb3e0000eb03f47e37feaabc40

  • SHA512

    251d61d7dae429f8eaca258704681d125a3b0e68736ef2bba90c065f4edb7cb1e4c7f79ea730028c2f58bcf787f70fe1c0e4657b40d02368b2f5cee9f709f6f8

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afoHvmQ+EZMYX/x6gtn:n3C9BRW0j/uVEZFJvd

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      3e732daa70bd1a74e3f25185d0762660_NeikiAnalytics.exe

    • Size

      128KB

    • MD5

      3e732daa70bd1a74e3f25185d0762660

    • SHA1

      262fe3937a4a15de751c568c78765ed8c1d12a94

    • SHA256

      8c6733e235b5839097ee8489a46b5b9c49366dfb3e0000eb03f47e37feaabc40

    • SHA512

      251d61d7dae429f8eaca258704681d125a3b0e68736ef2bba90c065f4edb7cb1e4c7f79ea730028c2f58bcf787f70fe1c0e4657b40d02368b2f5cee9f709f6f8

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afoHvmQ+EZMYX/x6gtn:n3C9BRW0j/uVEZFJvd

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks