Overview

overview

10

Static

static

3

d1c47fc558...cs.exe

windows7-x64

10

d1c47fc558...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1c47fc558fe02d5330c3e87b01ad8d0_NeikiAnalytics.exe

  • Size

    387KB

  • Sample

    240519-rdv5labc6v

  • MD5

    d1c47fc558fe02d5330c3e87b01ad8d0

  • SHA1

    bf2fa577a27ecaeb12e05418bd497cb456a17f6c

  • SHA256

    805d03d1a99a61954bfb8e80ba22f4b49bda9e07d708d38c39aaa84bafa135c3

  • SHA512

    f82a1a5dc1f12f5fb0ec67407f6f2a4a8720b9d7f3b1201b783ec57634b13fad212dec5ebc7920032efb27046c652324ff85324ff2a9e16017d1d68591bab0a4

  • SSDEEP

    12288:n3C9ytvngQjpUXoSWlnwJv90aKToFqwf1:SgdnJVU4TlnwJ6GoI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d1c47fc558fe02d5330c3e87b01ad8d0_NeikiAnalytics.exe

    • Size

      387KB

    • MD5

      d1c47fc558fe02d5330c3e87b01ad8d0

    • SHA1

      bf2fa577a27ecaeb12e05418bd497cb456a17f6c

    • SHA256

      805d03d1a99a61954bfb8e80ba22f4b49bda9e07d708d38c39aaa84bafa135c3

    • SHA512

      f82a1a5dc1f12f5fb0ec67407f6f2a4a8720b9d7f3b1201b783ec57634b13fad212dec5ebc7920032efb27046c652324ff85324ff2a9e16017d1d68591bab0a4

    • SSDEEP

      12288:n3C9ytvngQjpUXoSWlnwJv90aKToFqwf1:SgdnJVU4TlnwJ6GoI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks