Overview

overview

10

Static

static

7

7ecbfcb860...cs.exe

windows7-x64

10

7ecbfcb860...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ecbfcb86048e02a7d7cef4fa5868cc0_NeikiAnalytics.exe

  • Size

    361KB

  • Sample

    240519-fwnyfsbh7y

  • MD5

    7ecbfcb86048e02a7d7cef4fa5868cc0

  • SHA1

    b2ff6b8482cc8065c933a326e12c1e68f08fd010

  • SHA256

    4a1a69d4b6cdcc90b41442a73258de49ba2fe74ef20be8d3bf8900a32129416d

  • SHA512

    ab5087a5a5af21132be4ebe7dd4701cf56cf6488f049f90da732522033c2961cb6725330906105fb1d8b502252b7a5888de2a4f3fab29c3122e91a18fbc6bf6f

  • SSDEEP

    6144:Lcm4FmowdHoSHt251UriZFwu1b26X1wjhtSizjL:R4wFHoSHYHUrAwqzcJ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7ecbfcb86048e02a7d7cef4fa5868cc0_NeikiAnalytics.exe

    • Size

      361KB

    • MD5

      7ecbfcb86048e02a7d7cef4fa5868cc0

    • SHA1

      b2ff6b8482cc8065c933a326e12c1e68f08fd010

    • SHA256

      4a1a69d4b6cdcc90b41442a73258de49ba2fe74ef20be8d3bf8900a32129416d

    • SHA512

      ab5087a5a5af21132be4ebe7dd4701cf56cf6488f049f90da732522033c2961cb6725330906105fb1d8b502252b7a5888de2a4f3fab29c3122e91a18fbc6bf6f

    • SSDEEP

      6144:Lcm4FmowdHoSHt251UriZFwu1b26X1wjhtSizjL:R4wFHoSHYHUrAwqzcJ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks