Overview

overview

10

Static

static

3

da82ba94ef...cs.exe

windows7-x64

10

da82ba94ef...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da82ba94ef5606324cf310950fc1c6b0_NeikiAnalytics.exe

  • Size

    95KB

  • Sample

    240519-r5myasca73

  • MD5

    da82ba94ef5606324cf310950fc1c6b0

  • SHA1

    043e28f21c9504e936d272b11b2504e358c74da6

  • SHA256

    a86c839ca497b110b293d86f86c1174f03d6eb7d1c97e7a4056db21e1d37da48

  • SHA512

    8a743ff781ab2f3ec6e5b392bf1da6eaa8a48e76f05baf11bb02bf51d90a2645b2aa0f3a919de85917caf1290c06dcd554920578d45284da2301ef0fe0d67aa8

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxEPOfPrAc:ymb3NkkiQ3mdBjFo73PYP1lri3KuOnrT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      da82ba94ef5606324cf310950fc1c6b0_NeikiAnalytics.exe

    • Size

      95KB

    • MD5

      da82ba94ef5606324cf310950fc1c6b0

    • SHA1

      043e28f21c9504e936d272b11b2504e358c74da6

    • SHA256

      a86c839ca497b110b293d86f86c1174f03d6eb7d1c97e7a4056db21e1d37da48

    • SHA512

      8a743ff781ab2f3ec6e5b392bf1da6eaa8a48e76f05baf11bb02bf51d90a2645b2aa0f3a919de85917caf1290c06dcd554920578d45284da2301ef0fe0d67aa8

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxEPOfPrAc:ymb3NkkiQ3mdBjFo73PYP1lri3KuOnrT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks