Overview

overview

10

Static

static

7

70fbe59a65...cs.exe

windows7-x64

10

70fbe59a65...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70fbe59a653dcffcad8052f4a051ec10_NeikiAnalytics.exe

  • Size

    273KB

  • Sample

    240523-b7twmahd77

  • MD5

    70fbe59a653dcffcad8052f4a051ec10

  • SHA1

    15e809bc74e33ee50bfbd97043736c33da77f755

  • SHA256

    d35c84f1e32571521e67ac8a89a79726d57679f30f85456584b51bb617b0c699

  • SHA512

    c84cd46d2fe6d45d9c3df3695311539099b6e8a23e9c2953a37cf706d12bfad06ce2cd724fb99f0e370605e977b1c2f90157026544cfeed53c8bbf1c0b0f7865

  • SSDEEP

    6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmo:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      70fbe59a653dcffcad8052f4a051ec10_NeikiAnalytics.exe

    • Size

      273KB

    • MD5

      70fbe59a653dcffcad8052f4a051ec10

    • SHA1

      15e809bc74e33ee50bfbd97043736c33da77f755

    • SHA256

      d35c84f1e32571521e67ac8a89a79726d57679f30f85456584b51bb617b0c699

    • SHA512

      c84cd46d2fe6d45d9c3df3695311539099b6e8a23e9c2953a37cf706d12bfad06ce2cd724fb99f0e370605e977b1c2f90157026544cfeed53c8bbf1c0b0f7865

    • SSDEEP

      6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmo:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks