Overview

overview

10

Static

static

3

92f83df55c...cs.exe

windows7-x64

10

92f83df55c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92f83df55c9a3383c918bdf40baaf900_NeikiAnalytics.exe

  • Size

    103KB

  • Sample

    240519-hdmzjseg39

  • MD5

    92f83df55c9a3383c918bdf40baaf900

  • SHA1

    c78aee5f036cb73b1086700fa864acd9d4c66102

  • SHA256

    bc77357adc728b8f6f5762c1eece83da1233192c899d1b671f0a6f1a88a0bc1a

  • SHA512

    ff614f9e2edcffb87f4da41c410782b106c154fd3db8e0f5dc4e9c332667f93f9a38d4bf2dc520f7c07b21360164e7f375f6b9dfc8025f182fa4d0e9971bcb90

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoTNKDeS98hPUdHV7RNzfnLnN3oD:ymb3NkkiQ3mdBjFo5KDe88g1fR8d

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      92f83df55c9a3383c918bdf40baaf900_NeikiAnalytics.exe

    • Size

      103KB

    • MD5

      92f83df55c9a3383c918bdf40baaf900

    • SHA1

      c78aee5f036cb73b1086700fa864acd9d4c66102

    • SHA256

      bc77357adc728b8f6f5762c1eece83da1233192c899d1b671f0a6f1a88a0bc1a

    • SHA512

      ff614f9e2edcffb87f4da41c410782b106c154fd3db8e0f5dc4e9c332667f93f9a38d4bf2dc520f7c07b21360164e7f375f6b9dfc8025f182fa4d0e9971bcb90

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoTNKDeS98hPUdHV7RNzfnLnN3oD:ymb3NkkiQ3mdBjFo5KDe88g1fR8d

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks