Overview

overview

10

Static

static

3

67fcf0b793...cs.exe

windows7-x64

10

67fcf0b793...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67fcf0b7939eaf03e1dc6c6cdca66e60_NeikiAnalytics.exe

  • Size

    90KB

  • Sample

    240523-bcyw4aff5w

  • MD5

    67fcf0b7939eaf03e1dc6c6cdca66e60

  • SHA1

    936e27cc646c94ceec4098f9b914fb0666deed0f

  • SHA256

    a377d78c8ed079a73e87e6a7672e1827ef624764f5ef5183143f8f3881e06f4a

  • SHA512

    45b0aaf17ba8eb5940c095b9db0ab6f8d02ab98a3dcb7a1f7b1e9cca8a56d6ba8244972776339af7f4b9ecfcecdbb56a62f75feca10c8bfd6e4cf07ce6aa5706

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzac0Hobv0byLufTJfJVq:ymb3NkkiQ3mdBjFodt27HobvcyLufNfO

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      67fcf0b7939eaf03e1dc6c6cdca66e60_NeikiAnalytics.exe

    • Size

      90KB

    • MD5

      67fcf0b7939eaf03e1dc6c6cdca66e60

    • SHA1

      936e27cc646c94ceec4098f9b914fb0666deed0f

    • SHA256

      a377d78c8ed079a73e87e6a7672e1827ef624764f5ef5183143f8f3881e06f4a

    • SHA512

      45b0aaf17ba8eb5940c095b9db0ab6f8d02ab98a3dcb7a1f7b1e9cca8a56d6ba8244972776339af7f4b9ecfcecdbb56a62f75feca10c8bfd6e4cf07ce6aa5706

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzac0Hobv0byLufTJfJVq:ymb3NkkiQ3mdBjFodt27HobvcyLufNfO

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks