Overview

overview

10

Static

static

7

21605f73fc...cs.exe

windows7-x64

10

21605f73fc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21605f73fc3c5ce1211c0903b47a9da0_NeikiAnalytics.exe

  • Size

    367KB

  • Sample

    240522-ghnafaea38

  • MD5

    21605f73fc3c5ce1211c0903b47a9da0

  • SHA1

    c858c4467f4dd038b059f156782b70617ba6f016

  • SHA256

    4b591ac061c6eca1a8867f5b30ddde0c06c447c3a97ed1276a4c25a4ad844d54

  • SHA512

    cecfb591f5668d1b69ae1656425f7c6854c668540530b880cf4fd3205e3c8d3d519d1524725f9bcbf751d2809aae838e9e93b399156e2843fafdffe558f2c923

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSM/xK:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZf

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      21605f73fc3c5ce1211c0903b47a9da0_NeikiAnalytics.exe

    • Size

      367KB

    • MD5

      21605f73fc3c5ce1211c0903b47a9da0

    • SHA1

      c858c4467f4dd038b059f156782b70617ba6f016

    • SHA256

      4b591ac061c6eca1a8867f5b30ddde0c06c447c3a97ed1276a4c25a4ad844d54

    • SHA512

      cecfb591f5668d1b69ae1656425f7c6854c668540530b880cf4fd3205e3c8d3d519d1524725f9bcbf751d2809aae838e9e93b399156e2843fafdffe558f2c923

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSM/xK:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZf

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks