Overview

overview

10

Static

static

7

bf3fd24212...cs.exe

windows7-x64

10

bf3fd24212...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf3fd24212ae8756be50883a84621420_NeikiAnalytics.exe

  • Size

    75KB

  • Sample

    240519-pvdwjahf2w

  • MD5

    bf3fd24212ae8756be50883a84621420

  • SHA1

    07f3fd33cf77c352f64d7fa1d7c1738270d1f02f

  • SHA256

    df0769e52e64e86f20e45a6494b368af5f75170bdfc5f5c53a802530bf777699

  • SHA512

    c2f99dc4b76f2faf3e5d56bebe77b1bd3b5d53b48034574f1363827f52e716e29310ce40c365463ff92d0298286d9eb0a8b74e7a7eb7d788775f2653d99c94d6

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8G:9hOmTsF93UYfwC6GIoutz5yLpOSDg

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      bf3fd24212ae8756be50883a84621420_NeikiAnalytics.exe

    • Size

      75KB

    • MD5

      bf3fd24212ae8756be50883a84621420

    • SHA1

      07f3fd33cf77c352f64d7fa1d7c1738270d1f02f

    • SHA256

      df0769e52e64e86f20e45a6494b368af5f75170bdfc5f5c53a802530bf777699

    • SHA512

      c2f99dc4b76f2faf3e5d56bebe77b1bd3b5d53b48034574f1363827f52e716e29310ce40c365463ff92d0298286d9eb0a8b74e7a7eb7d788775f2653d99c94d6

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8G:9hOmTsF93UYfwC6GIoutz5yLpOSDg

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks