Overview

overview

10

Static

static

3

74e18181a7...cs.exe

windows7-x64

10

74e18181a7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74e18181a7192929a1e1da44f6469640_NeikiAnalytics.exe

  • Size

    95KB

  • Sample

    240519-e7mdbsag68

  • MD5

    74e18181a7192929a1e1da44f6469640

  • SHA1

    90ef0cf4f13bf029ed41dd02553876a9ac6b8a9d

  • SHA256

    24e66f8d839426aed193eecae78300733d0174c6d9f2a2a3f6abfcf28f5f5d72

  • SHA512

    ec244925d39e39df4ed6c271537d5498281006aee05552c59b005305965fa7e015ef12c9f0a8217349179971a51aae947b877ab222e8347a20fd2dbeeba52391

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qP1hvZo66Ox4oq2SQwfTQM:ymb3NkkiQ3mdBjFIj+qNhvZuHQY0M

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      74e18181a7192929a1e1da44f6469640_NeikiAnalytics.exe

    • Size

      95KB

    • MD5

      74e18181a7192929a1e1da44f6469640

    • SHA1

      90ef0cf4f13bf029ed41dd02553876a9ac6b8a9d

    • SHA256

      24e66f8d839426aed193eecae78300733d0174c6d9f2a2a3f6abfcf28f5f5d72

    • SHA512

      ec244925d39e39df4ed6c271537d5498281006aee05552c59b005305965fa7e015ef12c9f0a8217349179971a51aae947b877ab222e8347a20fd2dbeeba52391

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qP1hvZo66Ox4oq2SQwfTQM:ymb3NkkiQ3mdBjFIj+qNhvZuHQY0M

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks