Overview

overview

10

Static

static

3

1c809b8af5...cs.exe

windows7-x64

10

1c809b8af5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c809b8af5e20b5520a072773ffbba70_NeikiAnalytics.exe

  • Size

    2.9MB

  • Sample

    240522-exfsssbg87

  • MD5

    1c809b8af5e20b5520a072773ffbba70

  • SHA1

    1bb4fb0dab86b12c55171385ddfea2d7e92a997d

  • SHA256

    a8b7a61705337984b4c4d54d94dbe587e8839baa2b352eca2e9fa8e7574133f6

  • SHA512

    12dcee893244b014d09a719680e55dc82bddfc807cd147773d2e51d1683022c8a9d081fe00a1e3475ac6023445180cbed8a970471994ef1550ee520692b4aba8

  • SSDEEP

    49152:4ce7KpA6vXpoJ3kBCCjqUeGZHMIo1pqz40oBzv5bPknvr62tuLCG6T:4c26fCC/PMIi4oDgnDFteCGY

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1c809b8af5e20b5520a072773ffbba70_NeikiAnalytics.exe

    • Size

      2.9MB

    • MD5

      1c809b8af5e20b5520a072773ffbba70

    • SHA1

      1bb4fb0dab86b12c55171385ddfea2d7e92a997d

    • SHA256

      a8b7a61705337984b4c4d54d94dbe587e8839baa2b352eca2e9fa8e7574133f6

    • SHA512

      12dcee893244b014d09a719680e55dc82bddfc807cd147773d2e51d1683022c8a9d081fe00a1e3475ac6023445180cbed8a970471994ef1550ee520692b4aba8

    • SSDEEP

      49152:4ce7KpA6vXpoJ3kBCCjqUeGZHMIo1pqz40oBzv5bPknvr62tuLCG6T:4c26fCC/PMIi4oDgnDFteCGY

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks