Overview

overview

10

Static

static

7

339b6b2052...cs.exe

windows7-x64

10

339b6b2052...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    339b6b2052377c59589e0efa393bbb00_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240519-arq95agd7w

  • MD5

    339b6b2052377c59589e0efa393bbb00

  • SHA1

    927b9909e802145aaa565f06d1116007ecd1e797

  • SHA256

    b855466d75d692ecf5b2cccc47a1a4c6aebd53960c26c42d516310a42fe07e93

  • SHA512

    7e0de2d36540d3bf04a823a9555a1af7e1df698ec4dec8e9079b423aed43d4d21e92a2914782f7f4e00899e5e5f85ac60fe79a37e0d5482f0a002afc87d8f361

  • SSDEEP

    1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpWi:8hOmTsF93UYfwC6GIout0fmCiiiXA6mj

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      339b6b2052377c59589e0efa393bbb00_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      339b6b2052377c59589e0efa393bbb00

    • SHA1

      927b9909e802145aaa565f06d1116007ecd1e797

    • SHA256

      b855466d75d692ecf5b2cccc47a1a4c6aebd53960c26c42d516310a42fe07e93

    • SHA512

      7e0de2d36540d3bf04a823a9555a1af7e1df698ec4dec8e9079b423aed43d4d21e92a2914782f7f4e00899e5e5f85ac60fe79a37e0d5482f0a002afc87d8f361

    • SSDEEP

      1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpWi:8hOmTsF93UYfwC6GIout0fmCiiiXA6mj

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks