Overview

overview

10

Static

static

3

ea998160c4...cs.exe

windows7-x64

10

ea998160c4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea998160c46a1ddc07a751e8f684e030_NeikiAnalytics.exe

  • Size

    61KB

  • Sample

    240519-tc6wtaeb8w

  • MD5

    ea998160c46a1ddc07a751e8f684e030

  • SHA1

    a2bc38ba28d0256ff971345ca241c2f8ca74805f

  • SHA256

    77e721ffedc951363c50e8f38b3ad32bcc0f96941c5f05fec0a83a1a02c70263

  • SHA512

    7fdf74011a5e535e7d4b32cedaa0583f5a7a64f5b360152bb837d07be14495f207162090e2a34d72bd341dde06b7f42eff5515814ae9fa3a046d51c7f6b3a39e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKE8:ymb3NkkiQ3mdBjFII9ZvHKE8

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ea998160c46a1ddc07a751e8f684e030_NeikiAnalytics.exe

    • Size

      61KB

    • MD5

      ea998160c46a1ddc07a751e8f684e030

    • SHA1

      a2bc38ba28d0256ff971345ca241c2f8ca74805f

    • SHA256

      77e721ffedc951363c50e8f38b3ad32bcc0f96941c5f05fec0a83a1a02c70263

    • SHA512

      7fdf74011a5e535e7d4b32cedaa0583f5a7a64f5b360152bb837d07be14495f207162090e2a34d72bd341dde06b7f42eff5515814ae9fa3a046d51c7f6b3a39e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKE8:ymb3NkkiQ3mdBjFII9ZvHKE8

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks