Overview

overview

10

Static

static

3

452984f1c8...cs.exe

windows7-x64

10

452984f1c8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    452984f1c8d949557cf6793e3bd790b0_NeikiAnalytics.exe

  • Size

    79KB

  • Sample

    240519-bx95vsbf37

  • MD5

    452984f1c8d949557cf6793e3bd790b0

  • SHA1

    ece0a56988f7cebe0a5bbbf342ad9044b2c18d8e

  • SHA256

    c04e3669443c9956d9da2230236dc9f4d82217fe316f4be1d9cca443310c1b4d

  • SHA512

    cc0981577b0b0f20ea0c27ec45aca6d431a8036eab61b9db43b1abe7b5023a8826da0187c1ea86ca692bbc089a8d6a40649d4786af54187c8b526f90a8069ba4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgJb31HgxGc+gmvZW6DWfmd:ymb3NkkiQ3mdBjFIUb31HgxL+gmvZW6t

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      452984f1c8d949557cf6793e3bd790b0_NeikiAnalytics.exe

    • Size

      79KB

    • MD5

      452984f1c8d949557cf6793e3bd790b0

    • SHA1

      ece0a56988f7cebe0a5bbbf342ad9044b2c18d8e

    • SHA256

      c04e3669443c9956d9da2230236dc9f4d82217fe316f4be1d9cca443310c1b4d

    • SHA512

      cc0981577b0b0f20ea0c27ec45aca6d431a8036eab61b9db43b1abe7b5023a8826da0187c1ea86ca692bbc089a8d6a40649d4786af54187c8b526f90a8069ba4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgJb31HgxGc+gmvZW6DWfmd:ymb3NkkiQ3mdBjFIUb31HgxL+gmvZW6t

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks