Overview

overview

10

Static

static

3

e4890874e2...cs.exe

windows7-x64

10

e4890874e2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4890874e23625ef1b342bf04ba835b0_NeikiAnalytics.exe

  • Size

    67KB

  • Sample

    240519-sypnzsda99

  • MD5

    e4890874e23625ef1b342bf04ba835b0

  • SHA1

    860ba45851557ad8a28865fbd0ed51514b6cbcaa

  • SHA256

    ced092c8edcf23cff84b091ef64bcd94c70e6aee4b219ae17aa5b19173240bb1

  • SHA512

    3709fa5d9b5feb5dc1c364a90d01dc189afebde20431f93238415df0b68dd9fb7dfe0de2a9580b31c9fc702536fcae9e444077ff6765ba035acdcf9bb0bf3382

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfsIQt:ymb3NkkiQ3mdBjFI4VAIQt

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e4890874e23625ef1b342bf04ba835b0_NeikiAnalytics.exe

    • Size

      67KB

    • MD5

      e4890874e23625ef1b342bf04ba835b0

    • SHA1

      860ba45851557ad8a28865fbd0ed51514b6cbcaa

    • SHA256

      ced092c8edcf23cff84b091ef64bcd94c70e6aee4b219ae17aa5b19173240bb1

    • SHA512

      3709fa5d9b5feb5dc1c364a90d01dc189afebde20431f93238415df0b68dd9fb7dfe0de2a9580b31c9fc702536fcae9e444077ff6765ba035acdcf9bb0bf3382

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfsIQt:ymb3NkkiQ3mdBjFI4VAIQt

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks