Overview

overview

10

Static

static

7

d5d97fa652...cs.exe

windows7-x64

10

d5d97fa652...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5d97fa6521272a36d530b060b878670_NeikiAnalytics.exe

  • Size

    62KB

  • Sample

    240520-jlvj2aah9x

  • MD5

    d5d97fa6521272a36d530b060b878670

  • SHA1

    c3b5c90b432248e8657d7ab455a6dd382efa6641

  • SHA256

    387a2e3f84af1189e021f1f825507d6d178872179942c79e5f9930e7dcebfac4

  • SHA512

    191c27a5930240a0d2bedf4a704aee933d4e806c30e7c2f60363079b5df463082c4855b05af4b12b3736f5babd35eb4f7ca0f51b2ffd3962b2f76a760bb0d5a9

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+EMdM:zhOmTsF93UYfwC6GIoutiTWMdM

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d5d97fa6521272a36d530b060b878670_NeikiAnalytics.exe

    • Size

      62KB

    • MD5

      d5d97fa6521272a36d530b060b878670

    • SHA1

      c3b5c90b432248e8657d7ab455a6dd382efa6641

    • SHA256

      387a2e3f84af1189e021f1f825507d6d178872179942c79e5f9930e7dcebfac4

    • SHA512

      191c27a5930240a0d2bedf4a704aee933d4e806c30e7c2f60363079b5df463082c4855b05af4b12b3736f5babd35eb4f7ca0f51b2ffd3962b2f76a760bb0d5a9

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+EMdM:zhOmTsF93UYfwC6GIoutiTWMdM

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks