Overview

overview

10

Static

static

3

77f805c529...cs.exe

windows7-x64

10

77f805c529...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77f805c529905017f9f36ca773e4d940_NeikiAnalytics.exe

  • Size

    54KB

  • Sample

    240519-ffed3sbc25

  • MD5

    77f805c529905017f9f36ca773e4d940

  • SHA1

    cc9cfa00dfc59e383ac8adf67bb3d00ff3efe2ae

  • SHA256

    87a3964856dc460ec147cec15bf20bab1e62c80f79650b1d1594cbdd597ccc95

  • SHA512

    ddff896254cdb55df2de6ecfb1c10179a9382ed130576c56bf3a78787f4dca7c34e216d65f813e9c2a96adecbedc91e2141f31fa2799b67d7bbea7d6c196500f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFT:ymb3NkkiQ3mdBjFIFT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      77f805c529905017f9f36ca773e4d940_NeikiAnalytics.exe

    • Size

      54KB

    • MD5

      77f805c529905017f9f36ca773e4d940

    • SHA1

      cc9cfa00dfc59e383ac8adf67bb3d00ff3efe2ae

    • SHA256

      87a3964856dc460ec147cec15bf20bab1e62c80f79650b1d1594cbdd597ccc95

    • SHA512

      ddff896254cdb55df2de6ecfb1c10179a9382ed130576c56bf3a78787f4dca7c34e216d65f813e9c2a96adecbedc91e2141f31fa2799b67d7bbea7d6c196500f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFT:ymb3NkkiQ3mdBjFIFT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks