Overview

overview

10

Static

static

3

ac712df8a0...cs.exe

windows7-x64

10

ac712df8a0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac712df8a04e8796e6f4b847293e36f0_NeikiAnalytics.exe

  • Size

    56KB

  • Sample

    240524-fh3jpaeb33

  • MD5

    ac712df8a04e8796e6f4b847293e36f0

  • SHA1

    62e5f37914fe2d61f62b96005554c795fe037c90

  • SHA256

    ad703829e1b2584ec720b7ffeb6fcddb3df086b23cc56f9e43ef6646ecc49aaa

  • SHA512

    5d720808f2b7e9e359adf9ccdc185857b638f3a2b241feccd6907090ad056912d719ec6a4bc9a4a29e129cf058b281df124b6fd7883c5a3b2b937d0d2702cd8e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb6tZ9bsH:ymb3NkkiQ3mdBjFIb6tZNU

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ac712df8a04e8796e6f4b847293e36f0_NeikiAnalytics.exe

    • Size

      56KB

    • MD5

      ac712df8a04e8796e6f4b847293e36f0

    • SHA1

      62e5f37914fe2d61f62b96005554c795fe037c90

    • SHA256

      ad703829e1b2584ec720b7ffeb6fcddb3df086b23cc56f9e43ef6646ecc49aaa

    • SHA512

      5d720808f2b7e9e359adf9ccdc185857b638f3a2b241feccd6907090ad056912d719ec6a4bc9a4a29e129cf058b281df124b6fd7883c5a3b2b937d0d2702cd8e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb6tZ9bsH:ymb3NkkiQ3mdBjFIb6tZNU

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks