Overview

overview

10

Static

static

3

cf0b063465...cs.exe

windows7-x64

10

cf0b063465...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf0b063465712a9250c24ff9c57ed850_NeikiAnalytics.exe

  • Size

    75KB

  • Sample

    240519-q6fd6sah26

  • MD5

    cf0b063465712a9250c24ff9c57ed850

  • SHA1

    d40d274c2fa3915ed9e19725e83e9a059e177ddd

  • SHA256

    62031a2a9db0b115963b3ef9b034a344c6c7a7efc0ea47e7ed94b868a4549cf3

  • SHA512

    a55331e278c52e217963933939e1830b82e7baf7228a7d325f3d8afedb6e493975bbfe3ae0ae685d2b4b40e343f21034157d3325c4a6f75d374179c1cd175d0c

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIoAh2QpUnX1AP6:ymb3NkkiQ3mdBjFIsIVbpUO6

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cf0b063465712a9250c24ff9c57ed850_NeikiAnalytics.exe

    • Size

      75KB

    • MD5

      cf0b063465712a9250c24ff9c57ed850

    • SHA1

      d40d274c2fa3915ed9e19725e83e9a059e177ddd

    • SHA256

      62031a2a9db0b115963b3ef9b034a344c6c7a7efc0ea47e7ed94b868a4549cf3

    • SHA512

      a55331e278c52e217963933939e1830b82e7baf7228a7d325f3d8afedb6e493975bbfe3ae0ae685d2b4b40e343f21034157d3325c4a6f75d374179c1cd175d0c

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIoAh2QpUnX1AP6:ymb3NkkiQ3mdBjFIsIVbpUO6

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks