Overview

overview

10

Static

static

3

ad46eef0f9...cs.exe

windows7-x64

10

ad46eef0f9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad46eef0f9632d6717ab0d088e2e9a40_NeikiAnalytics.exe

  • Size

    75KB

  • Sample

    240524-fk8hqaec29

  • MD5

    ad46eef0f9632d6717ab0d088e2e9a40

  • SHA1

    f256ce48e1b5e5732b0787c0f21f69f00483f09f

  • SHA256

    051e2b017c6540f89a007a0459d023232c28076d332cd9e6ecc27ca3428c2f88

  • SHA512

    d412051cd89a56f6ac502bf4b8a7c890b4092efacc2d102485cfb1991492d15eec4163f3803b9b8b40f38971099b2e30456754cc705030fea4efedb8e91581fb

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIoAh2QpUnX1AP5:ymb3NkkiQ3mdBjFIsIVbpUO5

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ad46eef0f9632d6717ab0d088e2e9a40_NeikiAnalytics.exe

    • Size

      75KB

    • MD5

      ad46eef0f9632d6717ab0d088e2e9a40

    • SHA1

      f256ce48e1b5e5732b0787c0f21f69f00483f09f

    • SHA256

      051e2b017c6540f89a007a0459d023232c28076d332cd9e6ecc27ca3428c2f88

    • SHA512

      d412051cd89a56f6ac502bf4b8a7c890b4092efacc2d102485cfb1991492d15eec4163f3803b9b8b40f38971099b2e30456754cc705030fea4efedb8e91581fb

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIoAh2QpUnX1AP5:ymb3NkkiQ3mdBjFIsIVbpUO5

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks