Overview

overview

10

Static

static

3

8fa1684a3b...cs.exe

windows7-x64

10

8fa1684a3b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fa1684a3b0ad712ded69e85795afa60_NeikiAnalytics.exe

  • Size

    459KB

  • Sample

    240519-g42d7aec66

  • MD5

    8fa1684a3b0ad712ded69e85795afa60

  • SHA1

    ef0dbe89994f141f078774796c299d4cfb3d12cb

  • SHA256

    3a6cb7595bcbfef689e90edef6f0928c15930011f7ab44181c305bb1487c0b09

  • SHA512

    a0df0f3f130bc8aa98eb5675accea7cac2133df0c688a9fb7b2c0794a872c2465c323130a6f71afa842a3de8ed8ea1a5d9841c7dd83108de8e13c82e0e7b0bd3

  • SSDEEP

    6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1Hmu:d7Tc9Wj16A3StvxP

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8fa1684a3b0ad712ded69e85795afa60_NeikiAnalytics.exe

    • Size

      459KB

    • MD5

      8fa1684a3b0ad712ded69e85795afa60

    • SHA1

      ef0dbe89994f141f078774796c299d4cfb3d12cb

    • SHA256

      3a6cb7595bcbfef689e90edef6f0928c15930011f7ab44181c305bb1487c0b09

    • SHA512

      a0df0f3f130bc8aa98eb5675accea7cac2133df0c688a9fb7b2c0794a872c2465c323130a6f71afa842a3de8ed8ea1a5d9841c7dd83108de8e13c82e0e7b0bd3

    • SSDEEP

      6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1Hmu:d7Tc9Wj16A3StvxP

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks