Overview

overview

10

Static

static

3

41cf6d3d5a...cs.exe

windows7-x64

10

41cf6d3d5a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41cf6d3d5ae3f3911c585899d83c11a0_NeikiAnalytics.exe

  • Size

    95KB

  • Sample

    240522-1gfnrahf5z

  • MD5

    41cf6d3d5ae3f3911c585899d83c11a0

  • SHA1

    3bb81b588658334f4946e1ee7379171f18af1ed8

  • SHA256

    d48b612702ea376f482c86d9bf9929074298d3accf5e9ae493f084ea52e169aa

  • SHA512

    d58d848f6ade83620ab5b1de3e013eb1f0ec1caed9421251896f2b000b251cf4b8e631a2a0b193e46c6d36de07fd7a442bb912ce14c8f7dd38c14b91f900c188

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIS7/b9EUeWpEC3alBlwtn8BLnna:ymb3NkkiQ3mdBjFIi/REUZnKlbnvy

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      41cf6d3d5ae3f3911c585899d83c11a0_NeikiAnalytics.exe

    • Size

      95KB

    • MD5

      41cf6d3d5ae3f3911c585899d83c11a0

    • SHA1

      3bb81b588658334f4946e1ee7379171f18af1ed8

    • SHA256

      d48b612702ea376f482c86d9bf9929074298d3accf5e9ae493f084ea52e169aa

    • SHA512

      d58d848f6ade83620ab5b1de3e013eb1f0ec1caed9421251896f2b000b251cf4b8e631a2a0b193e46c6d36de07fd7a442bb912ce14c8f7dd38c14b91f900c188

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIS7/b9EUeWpEC3alBlwtn8BLnna:ymb3NkkiQ3mdBjFIi/REUZnKlbnvy

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks