Overview

overview

10

Static

static

3

9c746dbb85...cs.exe

windows7-x64

10

9c746dbb85...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c746dbb85fa6bd861e0de506d1dd2f0_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240520-dq9xmahg31

  • MD5

    9c746dbb85fa6bd861e0de506d1dd2f0

  • SHA1

    c52f15d2dd79dd4bc75dd44e20c823973359a1fb

  • SHA256

    61fccb6b57b709513bcdadb7194513f9b8c4d20172d0772ffaada4445e56f947

  • SHA512

    4d9f3ad1cdf3f23d0cd8990f518bf19ca8abb0b16dd43d0c2b27a39b2c6ef66ec74702f7b43ab5e8de9aced77df56cce94b1e18effee1ce295a49caa45b8af1b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+Luv9:ymb3NkkiQ3mdBjF0yMlq

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9c746dbb85fa6bd861e0de506d1dd2f0_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      9c746dbb85fa6bd861e0de506d1dd2f0

    • SHA1

      c52f15d2dd79dd4bc75dd44e20c823973359a1fb

    • SHA256

      61fccb6b57b709513bcdadb7194513f9b8c4d20172d0772ffaada4445e56f947

    • SHA512

      4d9f3ad1cdf3f23d0cd8990f518bf19ca8abb0b16dd43d0c2b27a39b2c6ef66ec74702f7b43ab5e8de9aced77df56cce94b1e18effee1ce295a49caa45b8af1b

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+Luv9:ymb3NkkiQ3mdBjF0yMlq

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks