Overview

overview

10

Static

static

3

ec7e0efe94...cs.exe

windows7-x64

10

ec7e0efe94...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec7e0efe94a160391127aa02c43c6a90_NeikiAnalytics.exe

  • Size

    394KB

  • Sample

    240520-mv2aqaga73

  • MD5

    ec7e0efe94a160391127aa02c43c6a90

  • SHA1

    c51555c08b513c8ab737c2406ac968ad86ea728c

  • SHA256

    a4aa3ab035fe27baccd78df5729bc8fb2a27973e95f97bef7e6b803a5e6a757a

  • SHA512

    0cfe884633d36840129a0c918af6cfbc26da9461c447c13971d88cff3d733ddbccf3094ef073602790ff870dc36874d6cc27ff47d91d64e2c16f13ef429bc491

  • SSDEEP

    6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu//:n3C9ytvngQjZbz+xt4vFBX

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ec7e0efe94a160391127aa02c43c6a90_NeikiAnalytics.exe

    • Size

      394KB

    • MD5

      ec7e0efe94a160391127aa02c43c6a90

    • SHA1

      c51555c08b513c8ab737c2406ac968ad86ea728c

    • SHA256

      a4aa3ab035fe27baccd78df5729bc8fb2a27973e95f97bef7e6b803a5e6a757a

    • SHA512

      0cfe884633d36840129a0c918af6cfbc26da9461c447c13971d88cff3d733ddbccf3094ef073602790ff870dc36874d6cc27ff47d91d64e2c16f13ef429bc491

    • SSDEEP

      6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu//:n3C9ytvngQjZbz+xt4vFBX

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks