Overview

overview

10

Static

static

3

7f054c26af...cs.exe

windows7-x64

10

7f054c26af...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f054c26afe0af370fe74b71db6e92c0_NeikiAnalytics.exe

  • Size

    267KB

  • Sample

    240519-fw7esscb33

  • MD5

    7f054c26afe0af370fe74b71db6e92c0

  • SHA1

    ffc7ef45152a356dfb2e8ddb4b8a0540ffa12f10

  • SHA256

    2a5f2523be5d9da3779ef63f430a386238709eeba5cc803433992dd48bb20493

  • SHA512

    2d7bf0322d8b3921b166180380fbd7e2ee51845ec441241b1567bbebca7af7add02a20f78940341a7510431d578bcc99e086609ee10632506f38caecb58cea8f

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmPzTkV2y/QTa9RBZydZbf83pnzgmmIMi:n3C9BRIG0asYFm71mPfkVB8dKwaWS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7f054c26afe0af370fe74b71db6e92c0_NeikiAnalytics.exe

    • Size

      267KB

    • MD5

      7f054c26afe0af370fe74b71db6e92c0

    • SHA1

      ffc7ef45152a356dfb2e8ddb4b8a0540ffa12f10

    • SHA256

      2a5f2523be5d9da3779ef63f430a386238709eeba5cc803433992dd48bb20493

    • SHA512

      2d7bf0322d8b3921b166180380fbd7e2ee51845ec441241b1567bbebca7af7add02a20f78940341a7510431d578bcc99e086609ee10632506f38caecb58cea8f

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmPzTkV2y/QTa9RBZydZbf83pnzgmmIMi:n3C9BRIG0asYFm71mPfkVB8dKwaWS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks