Overview

overview

10

Static

static

3

0ef1987207...cs.exe

windows7-x64

10

0ef1987207...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ef1987207b5bf5f3e44b5d27d482310_NeikiAnalytics.exe

  • Size

    73KB

  • Sample

    240521-z13rysaf4v

  • MD5

    0ef1987207b5bf5f3e44b5d27d482310

  • SHA1

    adee177942f631f31b51f450c2617945c6e76e19

  • SHA256

    1f33dda353ce7027bac7e23d9a3556bc1469f28c79b768bd347831c9d95b982d

  • SHA512

    9deb93a242be4e873082a2c5b6f656728b2aa0d1827d75523e259150a73b7f198a69cb0011c04a4766c8becaa159be772d8d9e71ae3b00f3bfb465ee303856b9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJSsD+cGUFzJx:ymb3NkkiQ3mdBjFIwsDhbNb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0ef1987207b5bf5f3e44b5d27d482310_NeikiAnalytics.exe

    • Size

      73KB

    • MD5

      0ef1987207b5bf5f3e44b5d27d482310

    • SHA1

      adee177942f631f31b51f450c2617945c6e76e19

    • SHA256

      1f33dda353ce7027bac7e23d9a3556bc1469f28c79b768bd347831c9d95b982d

    • SHA512

      9deb93a242be4e873082a2c5b6f656728b2aa0d1827d75523e259150a73b7f198a69cb0011c04a4766c8becaa159be772d8d9e71ae3b00f3bfb465ee303856b9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJSsD+cGUFzJx:ymb3NkkiQ3mdBjFIwsDhbNb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks