Overview

overview

10

Static

static

3

82b5b28bf1...cs.exe

windows7-x64

10

82b5b28bf1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82b5b28bf10b2ab7ae51ccd0092a2450_NeikiAnalytics.exe

  • Size

    459KB

  • Sample

    240519-f7a6qsce5t

  • MD5

    82b5b28bf10b2ab7ae51ccd0092a2450

  • SHA1

    9f61740d4f5283742cf89d05e8417458d1f018e3

  • SHA256

    65b81e8cef99e610763010f25351ff6503e786dc43047a23fe32cdbd2d1a6ff1

  • SHA512

    4b803662c0b5e4eee384a7c3fa5645f477431f26076cb988ffe8bcc560df0b613afe4e71328c3c7b5c7852ecc5df95eccf54d1cb65297284f4f11e5d6c564fa2

  • SSDEEP

    6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1Hmp:d7Tc9Wj16A3Stvxc

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      82b5b28bf10b2ab7ae51ccd0092a2450_NeikiAnalytics.exe

    • Size

      459KB

    • MD5

      82b5b28bf10b2ab7ae51ccd0092a2450

    • SHA1

      9f61740d4f5283742cf89d05e8417458d1f018e3

    • SHA256

      65b81e8cef99e610763010f25351ff6503e786dc43047a23fe32cdbd2d1a6ff1

    • SHA512

      4b803662c0b5e4eee384a7c3fa5645f477431f26076cb988ffe8bcc560df0b613afe4e71328c3c7b5c7852ecc5df95eccf54d1cb65297284f4f11e5d6c564fa2

    • SSDEEP

      6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1Hmp:d7Tc9Wj16A3Stvxc

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks