Overview

overview

10

Static

static

7

93912641f9...cs.exe

windows7-x64

10

93912641f9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93912641f99906fe48a1af744f07ba50_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240519-he18kaeg94

  • MD5

    93912641f99906fe48a1af744f07ba50

  • SHA1

    6dc095b6dec18890629d84b7aa9a15bd791b56c2

  • SHA256

    34846e4c4ca3fa3dab34a70346c125b4c37af6d19f1e4e9d9d37dde431c1f2ff

  • SHA512

    18067b9f50455377eb4c97c5dd9acb06729d3740308e8be33ef665c644a9361dd765b8195cd01da3afeec2bcc037935727b69226241e9bab275af71287c89b5c

  • SSDEEP

    1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpWJ:8hOmTsF93UYfwC6GIout0fmCiiiXA6mg

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      93912641f99906fe48a1af744f07ba50_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      93912641f99906fe48a1af744f07ba50

    • SHA1

      6dc095b6dec18890629d84b7aa9a15bd791b56c2

    • SHA256

      34846e4c4ca3fa3dab34a70346c125b4c37af6d19f1e4e9d9d37dde431c1f2ff

    • SHA512

      18067b9f50455377eb4c97c5dd9acb06729d3740308e8be33ef665c644a9361dd765b8195cd01da3afeec2bcc037935727b69226241e9bab275af71287c89b5c

    • SSDEEP

      1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpWJ:8hOmTsF93UYfwC6GIout0fmCiiiXA6mg

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks