Overview

overview

10

Static

static

3

9a16ec88d8...cs.exe

windows7-x64

10

9a16ec88d8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a16ec88d81b21de43ed0de172b823f0_NeikiAnalytics.exe

  • Size

    587KB

  • Sample

    240520-dkrtvshd61

  • MD5

    9a16ec88d81b21de43ed0de172b823f0

  • SHA1

    ff1832845402acd7c52c83699eaa5384f6ebb504

  • SHA256

    f6b3b173dcec544afbaf9bf5dc72dafbe37f4c3e24be7c6a68957ad4f3c53e2d

  • SHA512

    d31a3a7998ef8750b07dc3d7f0d1f1d6ee35deb765a8259b29515e28e236cc411a72895100faf0465b991e9df14c7ca623de580ee31d896643249e1886fa5665

  • SSDEEP

    6144:n3C9BRIj+ebjcSbcY+CaQdaFOY4iGFYtRdzzoyYxJAyfgayO:n3C9Lebz+xt4vFeFmgayO

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9a16ec88d81b21de43ed0de172b823f0_NeikiAnalytics.exe

    • Size

      587KB

    • MD5

      9a16ec88d81b21de43ed0de172b823f0

    • SHA1

      ff1832845402acd7c52c83699eaa5384f6ebb504

    • SHA256

      f6b3b173dcec544afbaf9bf5dc72dafbe37f4c3e24be7c6a68957ad4f3c53e2d

    • SHA512

      d31a3a7998ef8750b07dc3d7f0d1f1d6ee35deb765a8259b29515e28e236cc411a72895100faf0465b991e9df14c7ca623de580ee31d896643249e1886fa5665

    • SSDEEP

      6144:n3C9BRIj+ebjcSbcY+CaQdaFOY4iGFYtRdzzoyYxJAyfgayO:n3C9Lebz+xt4vFeFmgayO

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks