Overview

overview

10

Static

static

3

6a38d8d3c0...cs.exe

windows7-x64

10

6a38d8d3c0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a38d8d3c0c450eab62c85948a4c0690_NeikiAnalytics.exe

  • Size

    75KB

  • Sample

    240523-bkmh2agc49

  • MD5

    6a38d8d3c0c450eab62c85948a4c0690

  • SHA1

    192ac75e699c01ea5670940bed62417428e8e80a

  • SHA256

    cae0bcb1f3135c0fc942b97efb05aceb47f2f4eda10b6d98d58fcae433f2e749

  • SHA512

    9c095fffe100aa9b6513bfb833f852282b57600e5e4c558c0e88480bdaff720540c74b0f36c9210f8deb2a735f90d7e3998340a9d09bcf346fbcb1a564c28d34

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINHO:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuE

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6a38d8d3c0c450eab62c85948a4c0690_NeikiAnalytics.exe

    • Size

      75KB

    • MD5

      6a38d8d3c0c450eab62c85948a4c0690

    • SHA1

      192ac75e699c01ea5670940bed62417428e8e80a

    • SHA256

      cae0bcb1f3135c0fc942b97efb05aceb47f2f4eda10b6d98d58fcae433f2e749

    • SHA512

      9c095fffe100aa9b6513bfb833f852282b57600e5e4c558c0e88480bdaff720540c74b0f36c9210f8deb2a735f90d7e3998340a9d09bcf346fbcb1a564c28d34

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINHO:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuE

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks