Overview

overview

10

Static

static

3

855595412a...cs.exe

windows7-x64

10

855595412a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    855595412a53a5033cc819b50641b220_NeikiAnalytics.exe

  • Size

    267KB

  • Sample

    240520-b8kdksea66

  • MD5

    855595412a53a5033cc819b50641b220

  • SHA1

    c434f9d80297ed17dbac101808e473fd915d5072

  • SHA256

    27db1f9868dc1ac907dab32e9a0e66ec915cbc87fd19194be715a7fe143cd696

  • SHA512

    542248230f9c8eaad0c2efda2113674494c9f915fd9f35d5e0469336e6af02a5591de065e6904fcd8e45a1c1036cc37859f259a536bb9b98e21d2c6f40bec600

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmPzTkV2y/QTa9RBZydZbf83pnzgmmIML:n3C9BRIG0asYFm71mPfkVB8dKwaWb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      855595412a53a5033cc819b50641b220_NeikiAnalytics.exe

    • Size

      267KB

    • MD5

      855595412a53a5033cc819b50641b220

    • SHA1

      c434f9d80297ed17dbac101808e473fd915d5072

    • SHA256

      27db1f9868dc1ac907dab32e9a0e66ec915cbc87fd19194be715a7fe143cd696

    • SHA512

      542248230f9c8eaad0c2efda2113674494c9f915fd9f35d5e0469336e6af02a5591de065e6904fcd8e45a1c1036cc37859f259a536bb9b98e21d2c6f40bec600

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmPzTkV2y/QTa9RBZydZbf83pnzgmmIML:n3C9BRIG0asYFm71mPfkVB8dKwaWb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks