Overview

overview

10

Static

static

7

d873afa1c1...cs.exe

windows7-x64

10

d873afa1c1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d873afa1c12ff92eb38b063191b50d70_NeikiAnalytics.exe

  • Size

    62KB

  • Sample

    240519-rx789sbg63

  • MD5

    d873afa1c12ff92eb38b063191b50d70

  • SHA1

    2aefede21ea7231cc95e2a58739f59451eacb135

  • SHA256

    4d5ea2027e761d42bb29d5d49ee647dc9dce3141f1b32acacbc22fe7030e463f

  • SHA512

    07babfc56c863b1a616eb2270a27ff556d737cc758ffe84f3539aa9398f0e3b3c9d9e53e4a20d2375ac50f159de18608bcece4b3397cd78dba944bed0c1ceb55

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+EMdH:zhOmTsF93UYfwC6GIoutiTWMdH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d873afa1c12ff92eb38b063191b50d70_NeikiAnalytics.exe

    • Size

      62KB

    • MD5

      d873afa1c12ff92eb38b063191b50d70

    • SHA1

      2aefede21ea7231cc95e2a58739f59451eacb135

    • SHA256

      4d5ea2027e761d42bb29d5d49ee647dc9dce3141f1b32acacbc22fe7030e463f

    • SHA512

      07babfc56c863b1a616eb2270a27ff556d737cc758ffe84f3539aa9398f0e3b3c9d9e53e4a20d2375ac50f159de18608bcece4b3397cd78dba944bed0c1ceb55

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+EMdH:zhOmTsF93UYfwC6GIoutiTWMdH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks