Overview

overview

10

Static

static

3

a085004940...cs.exe

windows7-x64

10

a085004940...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a085004940911403d6d93fb9c35d3b90_NeikiAnalytics.exe

  • Size

    59KB

  • Sample

    240524-ees1eacb24

  • MD5

    a085004940911403d6d93fb9c35d3b90

  • SHA1

    9190233407ba6d20a1a5484e5a09cd17e632d349

  • SHA256

    4f5275dbc7f2d35babc2d50ae45f1a6198085f86c541e82eaf5215086f2debe2

  • SHA512

    99b5c7349cac566c0bcb44e10971b9d7987d6536df6ade0e2b2d51758589d4049672512638640339ce2f576c69c596733ac0da71d1467eeda1b4377c92381384

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsBM:ymb3NkkiQ3mdBjFIsIFBM

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      a085004940911403d6d93fb9c35d3b90_NeikiAnalytics.exe

    • Size

      59KB

    • MD5

      a085004940911403d6d93fb9c35d3b90

    • SHA1

      9190233407ba6d20a1a5484e5a09cd17e632d349

    • SHA256

      4f5275dbc7f2d35babc2d50ae45f1a6198085f86c541e82eaf5215086f2debe2

    • SHA512

      99b5c7349cac566c0bcb44e10971b9d7987d6536df6ade0e2b2d51758589d4049672512638640339ce2f576c69c596733ac0da71d1467eeda1b4377c92381384

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsImsBM:ymb3NkkiQ3mdBjFIsIFBM

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks