Overview

overview

10

Static

static

7

22911febc6...cs.exe

windows7-x64

10

22911febc6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22911febc68ff164996e0d3d9d140230_NeikiAnalytics.exe

  • Size

    454KB

  • Sample

    240523-traf6agg2y

  • MD5

    22911febc68ff164996e0d3d9d140230

  • SHA1

    4f6bd6a82184e5566cd07bec12fd0d383ea7e17c

  • SHA256

    6fc15296952088cdd5b650618d77bc2958c4e45f5c35140d6d383bb0207fa4fa

  • SHA512

    7a7d8f6d26842188ab1dd1297d8410f6dde6404acc21d5cad4d6d71ee6ca322e7cf945352db5a23bc90eb49a4261f19052a79be5d10e3755d21a6994f68c8b5f

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmw:x4wFHoS3eFaKHpv/VycgE81lgH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      22911febc68ff164996e0d3d9d140230_NeikiAnalytics.exe

    • Size

      454KB

    • MD5

      22911febc68ff164996e0d3d9d140230

    • SHA1

      4f6bd6a82184e5566cd07bec12fd0d383ea7e17c

    • SHA256

      6fc15296952088cdd5b650618d77bc2958c4e45f5c35140d6d383bb0207fa4fa

    • SHA512

      7a7d8f6d26842188ab1dd1297d8410f6dde6404acc21d5cad4d6d71ee6ca322e7cf945352db5a23bc90eb49a4261f19052a79be5d10e3755d21a6994f68c8b5f

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmw:x4wFHoS3eFaKHpv/VycgE81lgH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks