Overview

overview

10

Static

static

7

d1536d425f...cs.exe

windows7-x64

10

d1536d425f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1536d425f71ac5e184f6fe45c1d8290_NeikiAnalytics.exe

  • Size

    103KB

  • Sample

    240519-rcd5paba79

  • MD5

    d1536d425f71ac5e184f6fe45c1d8290

  • SHA1

    4368acf023afe7e83aea3a73a5197618e591dc3b

  • SHA256

    2f3280aa9eb3e9e763507fb6163f3da1407546d17e44dfb98a0e3dc5605449ab

  • SHA512

    8d5e0191e61a29693a91bc9e2c63beb153616aa52077371f8cc6fcd6cac79b57fbbfd6b68c4155491ae9442fea877f4b317efdbf8b2bd4ed2fd601e8de99cc12

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw5Ivov1d3ZdpQm6hU:9hOmTsF93UYfwC6GIoutz5yLpRDN6hU

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d1536d425f71ac5e184f6fe45c1d8290_NeikiAnalytics.exe

    • Size

      103KB

    • MD5

      d1536d425f71ac5e184f6fe45c1d8290

    • SHA1

      4368acf023afe7e83aea3a73a5197618e591dc3b

    • SHA256

      2f3280aa9eb3e9e763507fb6163f3da1407546d17e44dfb98a0e3dc5605449ab

    • SHA512

      8d5e0191e61a29693a91bc9e2c63beb153616aa52077371f8cc6fcd6cac79b57fbbfd6b68c4155491ae9442fea877f4b317efdbf8b2bd4ed2fd601e8de99cc12

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw5Ivov1d3ZdpQm6hU:9hOmTsF93UYfwC6GIoutz5yLpRDN6hU

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks