Overview

overview

10

Static

static

3

dfb7a7fa0e...cs.exe

windows7-x64

10

dfb7a7fa0e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfb7a7fa0e66ab11b997243f04a907c0_NeikiAnalytics.exe

  • Size

    83KB

  • Sample

    240519-slxh3ace77

  • MD5

    dfb7a7fa0e66ab11b997243f04a907c0

  • SHA1

    5aa5ebf2d74892f135b48df022b6867e4c389118

  • SHA256

    6b08410a148132d98a424c6b5668570c89c5ef79731fae23e39fa5cff422af20

  • SHA512

    464049e17c792e107213030ea8cf3088dcec8181f311774ce080d2fa15f54ab84411de9903650096bc9210ebef2f92290fa602e9ec33814f67ca2ed64b65e891

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAXPfgr2hKmdbcPi2vK:ymb3NkkiQ3mdBjFo6Pfgy3dbc/K

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      dfb7a7fa0e66ab11b997243f04a907c0_NeikiAnalytics.exe

    • Size

      83KB

    • MD5

      dfb7a7fa0e66ab11b997243f04a907c0

    • SHA1

      5aa5ebf2d74892f135b48df022b6867e4c389118

    • SHA256

      6b08410a148132d98a424c6b5668570c89c5ef79731fae23e39fa5cff422af20

    • SHA512

      464049e17c792e107213030ea8cf3088dcec8181f311774ce080d2fa15f54ab84411de9903650096bc9210ebef2f92290fa602e9ec33814f67ca2ed64b65e891

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAXPfgr2hKmdbcPi2vK:ymb3NkkiQ3mdBjFo6Pfgy3dbc/K

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks