Overview

overview

10

Static

static

3

05610cde1e...cs.exe

windows7-x64

10

05610cde1e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05610cde1e55e30a94aa060f2cb0bc80_NeikiAnalytics.exe

  • Size

    201KB

  • Sample

    240521-x2gvrsff65

  • MD5

    05610cde1e55e30a94aa060f2cb0bc80

  • SHA1

    4345b19384f10e8677af771853740de050aac687

  • SHA256

    2a90eb815058c9239be92a0380d308c1aca667407bf86d5315845d4d123e7741

  • SHA512

    597bd4f962e94f8de9c80800e3057296f1a8b9d478be2b040b83e159668ffef5f85d490529879b37aeea6de4a049a5cc436da70d51f6c68d31c2f2cff6a0d068

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+C2HVM1p6T78:PhOm2sI93UufdC67ciJTU2HVS638

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      05610cde1e55e30a94aa060f2cb0bc80_NeikiAnalytics.exe

    • Size

      201KB

    • MD5

      05610cde1e55e30a94aa060f2cb0bc80

    • SHA1

      4345b19384f10e8677af771853740de050aac687

    • SHA256

      2a90eb815058c9239be92a0380d308c1aca667407bf86d5315845d4d123e7741

    • SHA512

      597bd4f962e94f8de9c80800e3057296f1a8b9d478be2b040b83e159668ffef5f85d490529879b37aeea6de4a049a5cc436da70d51f6c68d31c2f2cff6a0d068

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+C2HVM1p6T78:PhOm2sI93UufdC67ciJTU2HVS638

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks