Overview

overview

10

Static

static

7

6a0404e563...cs.exe

windows7-x64

10

6a0404e563...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a0404e563719322ea443844d1f284a0_NeikiAnalytics.exe

  • Size

    198KB

  • Sample

    240523-bjz3qsgc24

  • MD5

    6a0404e563719322ea443844d1f284a0

  • SHA1

    5d5274516355b03b983a44585e2cd0cd85e9a420

  • SHA256

    7f0b0feb9025081fc8c0e187b38319f06b20c0d6364168236fd18713583276c1

  • SHA512

    c38d9dbb17f765f9bde7d90a1cee4e699ce84be68785cd4438e998292aefdba9c1a5f2b7032f9d00840ac3e63ea15f27b3c02eda8515e67c66e67279adc2a9ce

  • SSDEEP

    3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1uIZ:xcm4FmowdHoS3WV28HCddWhRO1Lc9Z

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6a0404e563719322ea443844d1f284a0_NeikiAnalytics.exe

    • Size

      198KB

    • MD5

      6a0404e563719322ea443844d1f284a0

    • SHA1

      5d5274516355b03b983a44585e2cd0cd85e9a420

    • SHA256

      7f0b0feb9025081fc8c0e187b38319f06b20c0d6364168236fd18713583276c1

    • SHA512

      c38d9dbb17f765f9bde7d90a1cee4e699ce84be68785cd4438e998292aefdba9c1a5f2b7032f9d00840ac3e63ea15f27b3c02eda8515e67c66e67279adc2a9ce

    • SSDEEP

      3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1uIZ:xcm4FmowdHoS3WV28HCddWhRO1Lc9Z

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks