Overview

overview

10

Static

static

3

bc518832c1...cs.exe

windows7-x64

10

bc518832c1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc518832c15e7fe8354a94738d5d4300_NeikiAnalytics.exe

  • Size

    226KB

  • Sample

    240519-pk7qvsha46

  • MD5

    bc518832c15e7fe8354a94738d5d4300

  • SHA1

    ccf0adcbfa3ccc1f63047f646b28c59d78764166

  • SHA256

    a0dd85bbb14b4e68b37a253c6b11c77114c1582753ac56123ea35116ad88c1e3

  • SHA512

    5412f6aad4f76863d31433ae65fb303f70672144ee24115814b251323b3425a312ac512c39ce1ebe87bcf5497e800b6354adbdd45b6d88533403aefbbf59b9f3

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x47WBO:n3C9BRo7MlrWKo+lxO

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      bc518832c15e7fe8354a94738d5d4300_NeikiAnalytics.exe

    • Size

      226KB

    • MD5

      bc518832c15e7fe8354a94738d5d4300

    • SHA1

      ccf0adcbfa3ccc1f63047f646b28c59d78764166

    • SHA256

      a0dd85bbb14b4e68b37a253c6b11c77114c1582753ac56123ea35116ad88c1e3

    • SHA512

      5412f6aad4f76863d31433ae65fb303f70672144ee24115814b251323b3425a312ac512c39ce1ebe87bcf5497e800b6354adbdd45b6d88533403aefbbf59b9f3

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x47WBO:n3C9BRo7MlrWKo+lxO

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks