Overview

overview

10

Static

static

3

5e444a7286...cs.exe

windows7-x64

10

5e444a7286...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e444a7286f7b6f237208e1ca46dab40_NeikiAnalytics.exe

  • Size

    68KB

  • Sample

    240519-dk4hnafd92

  • MD5

    5e444a7286f7b6f237208e1ca46dab40

  • SHA1

    18148e71db38b14951bf5168dc51e4ac082f07d0

  • SHA256

    97fe2f9b7e857ec41e0e7dc64656ea35de7861e3c2ae51b96af5d066e46c2337

  • SHA512

    f07ec4eaff94e9d5633f29fef5def149e82618c2f78e618882f323b15915ab9d7a7ed93fe95537f8d4bdd080770fd218748ddbc4e6fef1b8dd0683f3e3920f5f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUwcsbY/H:ymb3NkkiQ3mdBjF0yjcsMP

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5e444a7286f7b6f237208e1ca46dab40_NeikiAnalytics.exe

    • Size

      68KB

    • MD5

      5e444a7286f7b6f237208e1ca46dab40

    • SHA1

      18148e71db38b14951bf5168dc51e4ac082f07d0

    • SHA256

      97fe2f9b7e857ec41e0e7dc64656ea35de7861e3c2ae51b96af5d066e46c2337

    • SHA512

      f07ec4eaff94e9d5633f29fef5def149e82618c2f78e618882f323b15915ab9d7a7ed93fe95537f8d4bdd080770fd218748ddbc4e6fef1b8dd0683f3e3920f5f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUwcsbY/H:ymb3NkkiQ3mdBjF0yjcsMP

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks