Overview

overview

10

Static

static

7

09f6b67529...cs.exe

windows7-x64

10

09f6b67529...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09f6b6752900a59b23c0298dccd62d40_NeikiAnalytics.exe

  • Size

    273KB

  • Sample

    240519-wbhtpsab7t

  • MD5

    09f6b6752900a59b23c0298dccd62d40

  • SHA1

    c9d9a143b774430f473e4cf275229d3fd1c2b758

  • SHA256

    6e33a33b40e55c47d8aee39ebd354845ba97d966e11b60048be0a31b00e3d94a

  • SHA512

    35bba98dd9cef02321968e594eb79fac22d23b539f72c1896ca0c6a5fdc72a06ee320f76733a8966c76a76149837e45a8cd73dcff2aa7e6dde5ff6ee8688771b

  • SSDEEP

    6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bm1W:e4wFHoSgWjdpKGATTk/jYIOWN/KnnP/

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      09f6b6752900a59b23c0298dccd62d40_NeikiAnalytics.exe

    • Size

      273KB

    • MD5

      09f6b6752900a59b23c0298dccd62d40

    • SHA1

      c9d9a143b774430f473e4cf275229d3fd1c2b758

    • SHA256

      6e33a33b40e55c47d8aee39ebd354845ba97d966e11b60048be0a31b00e3d94a

    • SHA512

      35bba98dd9cef02321968e594eb79fac22d23b539f72c1896ca0c6a5fdc72a06ee320f76733a8966c76a76149837e45a8cd73dcff2aa7e6dde5ff6ee8688771b

    • SSDEEP

      6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bm1W:e4wFHoSgWjdpKGATTk/jYIOWN/KnnP/

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks