Overview

overview

10

Static

static

3

1f2c6bf219...cs.exe

windows7-x64

10

1f2c6bf219...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f2c6bf219350ecd07168d1cd92eb370_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240522-frcpmacg34

  • MD5

    1f2c6bf219350ecd07168d1cd92eb370

  • SHA1

    af2e906c4b71037750bf3f8c68f97d86ae32a6fe

  • SHA256

    f2c0891f0b29c29ff9e3b00a377dd15af1deb8f1efd9b0d2d8ad1ec6621d7d20

  • SHA512

    3025a8207dea7258b66b9f0e31afc7171d24d19d61cf3aa5a7e41474d0cee0e9c29f06da1d7eac49f4a647f7b0eae27f70c5f263b93e21206970bdb71501bfbd

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfw:ymb3NkkiQ3mdBjFI4VE

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      1f2c6bf219350ecd07168d1cd92eb370_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      1f2c6bf219350ecd07168d1cd92eb370

    • SHA1

      af2e906c4b71037750bf3f8c68f97d86ae32a6fe

    • SHA256

      f2c0891f0b29c29ff9e3b00a377dd15af1deb8f1efd9b0d2d8ad1ec6621d7d20

    • SHA512

      3025a8207dea7258b66b9f0e31afc7171d24d19d61cf3aa5a7e41474d0cee0e9c29f06da1d7eac49f4a647f7b0eae27f70c5f263b93e21206970bdb71501bfbd

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfw:ymb3NkkiQ3mdBjFI4VE

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks