Overview

overview

10

Static

static

7

0d66425ee0...cs.exe

windows7-x64

10

0d66425ee0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d66425ee0b32c8d7016d2d8d1f6e8e0_NeikiAnalytics.exe

  • Size

    401KB

  • Sample

    240519-wj8p4aad33

  • MD5

    0d66425ee0b32c8d7016d2d8d1f6e8e0

  • SHA1

    025569f002dd9c8f198a51754cb4a57900b3bf52

  • SHA256

    bf445d3408c8881faa710c0e436f9484c5b217b4b65ead5415e4f6dcdb008651

  • SHA512

    935eaeae21ec4097813f91db18519faf3adfbed9fa17cff56f91887ce98717ccbb47c68b065d62e21cbcedf4e36c1ed045d7f774ef16deca8379f21068d07662

  • SSDEEP

    6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqW9E33:T4wFHoSEubD2P33

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0d66425ee0b32c8d7016d2d8d1f6e8e0_NeikiAnalytics.exe

    • Size

      401KB

    • MD5

      0d66425ee0b32c8d7016d2d8d1f6e8e0

    • SHA1

      025569f002dd9c8f198a51754cb4a57900b3bf52

    • SHA256

      bf445d3408c8881faa710c0e436f9484c5b217b4b65ead5415e4f6dcdb008651

    • SHA512

      935eaeae21ec4097813f91db18519faf3adfbed9fa17cff56f91887ce98717ccbb47c68b065d62e21cbcedf4e36c1ed045d7f774ef16deca8379f21068d07662

    • SSDEEP

      6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqW9E33:T4wFHoSEubD2P33

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks