Overview

overview

10

Static

static

7

5966d5110f...cs.exe

windows7-x64

10

5966d5110f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5966d5110f575445a7280c3fb897c7b0_NeikiAnalytics.exe

  • Size

    83KB

  • Sample

    240519-c9wnnsee6t

  • MD5

    5966d5110f575445a7280c3fb897c7b0

  • SHA1

    48567bebb4c98e7193a666ffb7baf9bdbabae25c

  • SHA256

    cfcdb38a610c2aecd42cebb6afc3cc25f6310435a0244599bbe06fb03eab5be7

  • SHA512

    b03794c021ba84984a593ddc2d5fdda93dc27267d743dd540b2944882f9b8dc2f1df3056b64b9c9ab81d0498fce8311bc0b44c8ce358af57f75f96c27570d9ae

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpCihfj:zhOmTsF93UYfwC6GIoutiTU2HVS64hb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5966d5110f575445a7280c3fb897c7b0_NeikiAnalytics.exe

    • Size

      83KB

    • MD5

      5966d5110f575445a7280c3fb897c7b0

    • SHA1

      48567bebb4c98e7193a666ffb7baf9bdbabae25c

    • SHA256

      cfcdb38a610c2aecd42cebb6afc3cc25f6310435a0244599bbe06fb03eab5be7

    • SHA512

      b03794c021ba84984a593ddc2d5fdda93dc27267d743dd540b2944882f9b8dc2f1df3056b64b9c9ab81d0498fce8311bc0b44c8ce358af57f75f96c27570d9ae

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpCihfj:zhOmTsF93UYfwC6GIoutiTU2HVS64hb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks