Overview

overview

10

Static

static

3

8ab389b7e4...cs.exe

windows7-x64

10

8ab389b7e4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ab389b7e4e99721fec4d6a60cc87460_NeikiAnalytics.exe

  • Size

    58KB

  • Sample

    240523-z2v4hagg89

  • MD5

    8ab389b7e4e99721fec4d6a60cc87460

  • SHA1

    ff6f3ace55f4a915f2308448e79f16229b354fb6

  • SHA256

    9c157bd599fbcfaf2c9737f06f57350268b65e8c8d982328128fbe71fab1831f

  • SHA512

    5afcd81d7d65732512f7e83832144e33be75deb06fa08744251ab449e40e353bcfed0f22d545cc5bf6ebc0a90c46f84350324633a5e72315d4cfd31df9b7b340

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIm2hT:ymb3NkkiQ3mdBjFIsIrhT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8ab389b7e4e99721fec4d6a60cc87460_NeikiAnalytics.exe

    • Size

      58KB

    • MD5

      8ab389b7e4e99721fec4d6a60cc87460

    • SHA1

      ff6f3ace55f4a915f2308448e79f16229b354fb6

    • SHA256

      9c157bd599fbcfaf2c9737f06f57350268b65e8c8d982328128fbe71fab1831f

    • SHA512

      5afcd81d7d65732512f7e83832144e33be75deb06fa08744251ab449e40e353bcfed0f22d545cc5bf6ebc0a90c46f84350324633a5e72315d4cfd31df9b7b340

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIm2hT:ymb3NkkiQ3mdBjFIsIrhT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks