Overview

overview

10

Static

static

10

3ea65a22e1...cs.exe

windows7-x64

10

3ea65a22e1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ea65a22e1165117e01cac812bbcf090_NeikiAnalytics.exe

  • Size

    357KB

  • Sample

    240523-y35hwsfa37

  • MD5

    3ea65a22e1165117e01cac812bbcf090

  • SHA1

    b2a8f2a21a6f6978bdd018d68bc68bcf552b38a3

  • SHA256

    09c0ce3295b027233e4e2c840e67dae866e124eb9e691e63809a963428b99b6e

  • SHA512

    14a689fb1b7be7ce4afe33ff7f4a90f685292870d1bfac59ba36bb755ba20497d1e7a88b74f736ce431acdff7114e2229bd8f66dd9f20708b516be978db911ba

  • SSDEEP

    6144:mvk3Q5ibjnNuuXckaL7pbRBkce97aw/N4L7o/:mvMQ5ibjnwka3pbRC19Gw/Nso/

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      3ea65a22e1165117e01cac812bbcf090_NeikiAnalytics.exe

    • Size

      357KB

    • MD5

      3ea65a22e1165117e01cac812bbcf090

    • SHA1

      b2a8f2a21a6f6978bdd018d68bc68bcf552b38a3

    • SHA256

      09c0ce3295b027233e4e2c840e67dae866e124eb9e691e63809a963428b99b6e

    • SHA512

      14a689fb1b7be7ce4afe33ff7f4a90f685292870d1bfac59ba36bb755ba20497d1e7a88b74f736ce431acdff7114e2229bd8f66dd9f20708b516be978db911ba

    • SSDEEP

      6144:mvk3Q5ibjnNuuXckaL7pbRBkce97aw/N4L7o/:mvMQ5ibjnwka3pbRC19Gw/Nso/

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks