Overview

overview

10

Static

static

3

3c7ce9d4b1...cs.exe

windows7-x64

10

3c7ce9d4b1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c7ce9d4b1f06434a541b9453036d820_NeikiAnalytics.exe

  • Size

    87KB

  • Sample

    240519-bd2pdaab59

  • MD5

    3c7ce9d4b1f06434a541b9453036d820

  • SHA1

    d8adb841885861ab260c9b65f5f5f8566ff7cb5e

  • SHA256

    7928d0423b1b1a8f488cb5bc3d4110a6e6b33bb20c2c2dd3019c79e5243d5b05

  • SHA512

    860fe857edeb371707547f2a4340ced08afca40f92c6e164149eb4c277d18a63e2db05d57aae0203d027aed7b0a8d6a0bfeb7622072c303abf7b1938d31825f8

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3em:ymb3NkkiQ3mdBjF+3TU2K3bJZXD

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      3c7ce9d4b1f06434a541b9453036d820_NeikiAnalytics.exe

    • Size

      87KB

    • MD5

      3c7ce9d4b1f06434a541b9453036d820

    • SHA1

      d8adb841885861ab260c9b65f5f5f8566ff7cb5e

    • SHA256

      7928d0423b1b1a8f488cb5bc3d4110a6e6b33bb20c2c2dd3019c79e5243d5b05

    • SHA512

      860fe857edeb371707547f2a4340ced08afca40f92c6e164149eb4c277d18a63e2db05d57aae0203d027aed7b0a8d6a0bfeb7622072c303abf7b1938d31825f8

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3em:ymb3NkkiQ3mdBjF+3TU2K3bJZXD

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks