Overview

overview

10

Static

static

3

90b9025678...cs.exe

windows7-x64

10

90b9025678...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90b90256780e8fd7f0a3729f546a4a00_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240519-g7hfgsed85

  • MD5

    90b90256780e8fd7f0a3729f546a4a00

  • SHA1

    9b97685544ce7bd3a8d179ae5194acd2045c6d64

  • SHA256

    35b07735f815ba3990fbff3f93eeb91a4a408d6388dc33aeb4eb59f59ff16393

  • SHA512

    5e27a9aefa58720a7d3d7b4469dc661ff35b681c363eaaf1f45967be0e8d76ff5875b3b59ebf76e1cb3e385b49d42e5ff8e84feedc572ec97dc64243e94dc7f9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfDK:ymb3NkkiQ3mdBjFI4VC

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      90b90256780e8fd7f0a3729f546a4a00_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      90b90256780e8fd7f0a3729f546a4a00

    • SHA1

      9b97685544ce7bd3a8d179ae5194acd2045c6d64

    • SHA256

      35b07735f815ba3990fbff3f93eeb91a4a408d6388dc33aeb4eb59f59ff16393

    • SHA512

      5e27a9aefa58720a7d3d7b4469dc661ff35b681c363eaaf1f45967be0e8d76ff5875b3b59ebf76e1cb3e385b49d42e5ff8e84feedc572ec97dc64243e94dc7f9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfDK:ymb3NkkiQ3mdBjFI4VC

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks