Overview

overview

10

Static

static

3

8f8d2e19ec...cs.exe

windows7-x64

10

8f8d2e19ec...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f8d2e19eca2f9a3d98543ceaef4c7e0_NeikiAnalytics.exe

  • Size

    75KB

  • Sample

    240519-g4sgaaec41

  • MD5

    8f8d2e19eca2f9a3d98543ceaef4c7e0

  • SHA1

    eadc2712cd941a31f357336f0878f231a308f122

  • SHA256

    0fd144de79974779c99e0a68304a35eb1bb817cdc85e6773d699b75954be977d

  • SHA512

    8ea534976a81a740185cdc97a7c7e58143d5631d15cebb67c62a1c1d79a2c83f73451ed930999f6548ad9fda18906f85f8e54687cc3d922d80676689e1b5b00a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC54:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCi

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8f8d2e19eca2f9a3d98543ceaef4c7e0_NeikiAnalytics.exe

    • Size

      75KB

    • MD5

      8f8d2e19eca2f9a3d98543ceaef4c7e0

    • SHA1

      eadc2712cd941a31f357336f0878f231a308f122

    • SHA256

      0fd144de79974779c99e0a68304a35eb1bb817cdc85e6773d699b75954be977d

    • SHA512

      8ea534976a81a740185cdc97a7c7e58143d5631d15cebb67c62a1c1d79a2c83f73451ed930999f6548ad9fda18906f85f8e54687cc3d922d80676689e1b5b00a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC54:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCi

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks