Overview

overview

10

Static

static

3

74d38a1951...cs.exe

windows7-x64

10

74d38a1951...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74d38a19512bb52aabec58d437595be0_NeikiAnalytics.exe

  • Size

    89KB

  • Sample

    240523-ck2tdshh9x

  • MD5

    74d38a19512bb52aabec58d437595be0

  • SHA1

    d67724f15ab00ee5fce41a725a6fdca9b2a427d3

  • SHA256

    6074548346ab0e8ac394553459b35e5676d54b39213748c92de8d375c48da86e

  • SHA512

    35a90f2ff237eea08bf3015b920a0adb0e16483bc1b85ad7972425dbf3973def6b9c67c330e08f2d37630d6b481a4acf86b44ea3b897afc4a8100a18d81578c2

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDISoFGDvPGB1haZJOzU:ymb3NkkiQ3mdBjFIk7+czl

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      74d38a19512bb52aabec58d437595be0_NeikiAnalytics.exe

    • Size

      89KB

    • MD5

      74d38a19512bb52aabec58d437595be0

    • SHA1

      d67724f15ab00ee5fce41a725a6fdca9b2a427d3

    • SHA256

      6074548346ab0e8ac394553459b35e5676d54b39213748c92de8d375c48da86e

    • SHA512

      35a90f2ff237eea08bf3015b920a0adb0e16483bc1b85ad7972425dbf3973def6b9c67c330e08f2d37630d6b481a4acf86b44ea3b897afc4a8100a18d81578c2

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDISoFGDvPGB1haZJOzU:ymb3NkkiQ3mdBjFIk7+czl

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks