Overview

overview

10

Static

static

3

21335d6baf...cs.exe

windows7-x64

10

21335d6baf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21335d6bafaa2181f854298f818331b0_NeikiAnalytics.exe

  • Size

    63KB

  • Sample

    240522-gg8jzsea9x

  • MD5

    21335d6bafaa2181f854298f818331b0

  • SHA1

    2e5172565fc7c3b45c6a8fea119e40e5e3b1c989

  • SHA256

    e10e94efa6989d3cab55d967772c0ac4a805b82496dc1aef4fba993c3b4ac8d9

  • SHA512

    01aa6406f909430c60e1c74dc81a18b65f2e5edbdb0eefadfb31d12b23f610070a1820ec0b0755bf4d9dddb0330fdc7331d89016c14fa683e6bc746007029c23

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3A/x:ymb3NkkiQ3mdBjFI46TQ/x

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      21335d6bafaa2181f854298f818331b0_NeikiAnalytics.exe

    • Size

      63KB

    • MD5

      21335d6bafaa2181f854298f818331b0

    • SHA1

      2e5172565fc7c3b45c6a8fea119e40e5e3b1c989

    • SHA256

      e10e94efa6989d3cab55d967772c0ac4a805b82496dc1aef4fba993c3b4ac8d9

    • SHA512

      01aa6406f909430c60e1c74dc81a18b65f2e5edbdb0eefadfb31d12b23f610070a1820ec0b0755bf4d9dddb0330fdc7331d89016c14fa683e6bc746007029c23

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3A/x:ymb3NkkiQ3mdBjFI46TQ/x

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks