Overview

overview

10

Static

static

7

ce4bb2a410...cs.exe

windows7-x64

10

ce4bb2a410...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce4bb2a410ff620d55a3620cd1dbf2f0_NeikiAnalytics.exe

  • Size

    367KB

  • Sample

    240519-q4c62aah81

  • MD5

    ce4bb2a410ff620d55a3620cd1dbf2f0

  • SHA1

    f2d159618a6b40a7bc5867a86489deb7c2d896a3

  • SHA256

    1ba4e57c0335b6da530f5f08d8cce295ece7cd0ba8262a19ee3b7afa73869162

  • SHA512

    86afd83df8f996267955f105594581fd5df7290d813de5ef69e8615f65883924e7f1b0d3c0ecd19388816301b42640c37c9ead20db9cfff99135e2e07dc51d54

  • SSDEEP

    6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE89:/4wFHoSQuxy3rTXIM189

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ce4bb2a410ff620d55a3620cd1dbf2f0_NeikiAnalytics.exe

    • Size

      367KB

    • MD5

      ce4bb2a410ff620d55a3620cd1dbf2f0

    • SHA1

      f2d159618a6b40a7bc5867a86489deb7c2d896a3

    • SHA256

      1ba4e57c0335b6da530f5f08d8cce295ece7cd0ba8262a19ee3b7afa73869162

    • SHA512

      86afd83df8f996267955f105594581fd5df7290d813de5ef69e8615f65883924e7f1b0d3c0ecd19388816301b42640c37c9ead20db9cfff99135e2e07dc51d54

    • SSDEEP

      6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE89:/4wFHoSQuxy3rTXIM189

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks