Overview

overview

10

Static

static

3

a2148d9852...cs.exe

windows7-x64

10

a2148d9852...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2148d9852842c1f581027b38abd6e10_NeikiAnalytics.exe

  • Size

    76KB

  • Sample

    240519-jew5aagg7x

  • MD5

    a2148d9852842c1f581027b38abd6e10

  • SHA1

    a9f771c3f547cc86dcd493f72f0490357f5c94b4

  • SHA256

    624d0964560f9b8acf68acf12a81fbee259964c629e6c0252eeff01b30a2bcab

  • SHA512

    bc5207d36df1e650d23a8f224e9e3226a8a160e875c2413d552062a62a9eb615a6e64806d575d41e0100f602f99886b6ccd78e1d1e14c4fe2c92a44e72d8821b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrAp:ymb3NkkiQ3mdBjFIIp9L9QrrAp

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a2148d9852842c1f581027b38abd6e10_NeikiAnalytics.exe

    • Size

      76KB

    • MD5

      a2148d9852842c1f581027b38abd6e10

    • SHA1

      a9f771c3f547cc86dcd493f72f0490357f5c94b4

    • SHA256

      624d0964560f9b8acf68acf12a81fbee259964c629e6c0252eeff01b30a2bcab

    • SHA512

      bc5207d36df1e650d23a8f224e9e3226a8a160e875c2413d552062a62a9eb615a6e64806d575d41e0100f602f99886b6ccd78e1d1e14c4fe2c92a44e72d8821b

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrAp:ymb3NkkiQ3mdBjFIIp9L9QrrAp

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks