Overview

overview

10

Static

static

3

8b97f12daa...cs.exe

windows7-x64

10

8b97f12daa...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b97f12daa4ad04b4d163f33f394e940_NeikiAnalytics.exe

  • Size

    277KB

  • Sample

    240519-gsxxmadg2y

  • MD5

    8b97f12daa4ad04b4d163f33f394e940

  • SHA1

    ed4b257919f5016a178dfa0064b3f6de44550a97

  • SHA256

    955fe9f6c0f20fb3b48fe874416cdac75b2558ff52615edaf57bc9dae4707071

  • SHA512

    07fd9074161a1e25bf10cdc4a585e9331955e71e5ca094d821177242ae5aa3f77db8deb685cb39b107c96f313fe24cd480663a8f4c665d8c33d89850367ff1e6

  • SSDEEP

    6144:n3C9BRIG0asYFm71m8+GdkB9yMu7VvemA:n3C9uYA71kSMuW

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8b97f12daa4ad04b4d163f33f394e940_NeikiAnalytics.exe

    • Size

      277KB

    • MD5

      8b97f12daa4ad04b4d163f33f394e940

    • SHA1

      ed4b257919f5016a178dfa0064b3f6de44550a97

    • SHA256

      955fe9f6c0f20fb3b48fe874416cdac75b2558ff52615edaf57bc9dae4707071

    • SHA512

      07fd9074161a1e25bf10cdc4a585e9331955e71e5ca094d821177242ae5aa3f77db8deb685cb39b107c96f313fe24cd480663a8f4c665d8c33d89850367ff1e6

    • SSDEEP

      6144:n3C9BRIG0asYFm71m8+GdkB9yMu7VvemA:n3C9uYA71kSMuW

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks