Overview

overview

10

Static

static

7

bbf1826f77...cs.exe

windows7-x64

10

bbf1826f77...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbf1826f77fc1200a1501e9ed5a3c1c0_NeikiAnalytics.exe

  • Size

    279KB

  • Sample

    240519-pj4yksha6z

  • MD5

    bbf1826f77fc1200a1501e9ed5a3c1c0

  • SHA1

    27e0c711cdda423a3bafb5e88a5680fe7d9b0439

  • SHA256

    b0b4d7411ba834090df0b34a3b31e7a120732b50f7ea06be30305b5ec56b57e6

  • SHA512

    279431f887ff46d846607d174996a2a5acb5ab5fb00c2bd8ed17d560b006de54ee68bb2018fab61e6e124d02bb0c1587c30677969c8f0baee849a5f172ad373d

  • SSDEEP

    6144:7cm4FmowdHoSoXSBcm4Vcm4FmowdHoSphra+cm4FMhraHcpOaKHpV:B4wFHoSoXW434wFHoS3eg4aeFaKHpV

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      bbf1826f77fc1200a1501e9ed5a3c1c0_NeikiAnalytics.exe

    • Size

      279KB

    • MD5

      bbf1826f77fc1200a1501e9ed5a3c1c0

    • SHA1

      27e0c711cdda423a3bafb5e88a5680fe7d9b0439

    • SHA256

      b0b4d7411ba834090df0b34a3b31e7a120732b50f7ea06be30305b5ec56b57e6

    • SHA512

      279431f887ff46d846607d174996a2a5acb5ab5fb00c2bd8ed17d560b006de54ee68bb2018fab61e6e124d02bb0c1587c30677969c8f0baee849a5f172ad373d

    • SSDEEP

      6144:7cm4FmowdHoSoXSBcm4Vcm4FmowdHoSphra+cm4FMhraHcpOaKHpV:B4wFHoSoXW434wFHoS3eg4aeFaKHpV

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks