Overview

overview

10

Static

static

3

f4cc8ada5f...cs.exe

windows7-x64

10

f4cc8ada5f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4cc8ada5f23563846bec2b0fe77f340_NeikiAnalytics.exe

  • Size

    67KB

  • Sample

    240519-t44krsff88

  • MD5

    f4cc8ada5f23563846bec2b0fe77f340

  • SHA1

    7ae38ad59314f80c8c052bd87ed27a74c258fc7f

  • SHA256

    ee4d1fdae8177b4a0b12c1720e233467e71df0d01c0e2995f4fe33a4f4621587

  • SHA512

    94412e4bfd370aaa0660deb1b3ae8f12191bb6aada890a797339344321f00d7e6c9c5d53d6cc73ddaacaec697b3faa78a357e4f77c769b342586a828f479d026

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+LuvPrgpX5:ymb3NkkiQ3mdBjF0yMlwri

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      f4cc8ada5f23563846bec2b0fe77f340_NeikiAnalytics.exe

    • Size

      67KB

    • MD5

      f4cc8ada5f23563846bec2b0fe77f340

    • SHA1

      7ae38ad59314f80c8c052bd87ed27a74c258fc7f

    • SHA256

      ee4d1fdae8177b4a0b12c1720e233467e71df0d01c0e2995f4fe33a4f4621587

    • SHA512

      94412e4bfd370aaa0660deb1b3ae8f12191bb6aada890a797339344321f00d7e6c9c5d53d6cc73ddaacaec697b3faa78a357e4f77c769b342586a828f479d026

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+LuvPrgpX5:ymb3NkkiQ3mdBjF0yMlwri

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks