Overview

overview

10

Static

static

3

fc4f5c3efe...cs.exe

windows7-x64

10

fc4f5c3efe...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc4f5c3efed453004a0cbe612d698e20_NeikiAnalytics.exe

  • Size

    493KB

  • Sample

    240519-vm8zlagg77

  • MD5

    fc4f5c3efed453004a0cbe612d698e20

  • SHA1

    60069f1ce8e51f2ce760533c5ef1bbcd0a5f8df8

  • SHA256

    497aaf00ac7919f1b0c2a8a4ea6894cf3e55f8af9bae8095ebbdc608a6b43437

  • SHA512

    6f7c0e6d61ceeebb4044196b1ba69a7f55c475ab52c1e066470a4badc9d09bc45a631e5ca5d35bc8b723387b61eb86f3be69653578fc9a9a0f20a95a3b08739e

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTbWL5wEpOQ9DRRK:n3C9yMo+S0L9xRnoq7H9QYcmeN9DS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      fc4f5c3efed453004a0cbe612d698e20_NeikiAnalytics.exe

    • Size

      493KB

    • MD5

      fc4f5c3efed453004a0cbe612d698e20

    • SHA1

      60069f1ce8e51f2ce760533c5ef1bbcd0a5f8df8

    • SHA256

      497aaf00ac7919f1b0c2a8a4ea6894cf3e55f8af9bae8095ebbdc608a6b43437

    • SHA512

      6f7c0e6d61ceeebb4044196b1ba69a7f55c475ab52c1e066470a4badc9d09bc45a631e5ca5d35bc8b723387b61eb86f3be69653578fc9a9a0f20a95a3b08739e

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTbWL5wEpOQ9DRRK:n3C9yMo+S0L9xRnoq7H9QYcmeN9DS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks