Overview

overview

10

Static

static

7

8a0ef55e78...cs.exe

windows7-x64

10

8a0ef55e78...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a0ef55e78bd004717cb93c0dc2d5fb0_NeikiAnalytics.exe

  • Size

    89KB

  • Sample

    240524-jn8jnsad43

  • MD5

    8a0ef55e78bd004717cb93c0dc2d5fb0

  • SHA1

    926735d3e9c51b8f5e0bc1f1fbd73e5f42defd32

  • SHA256

    c496982ff541c076154dc230d7a34c026fd77cea00c964f73ad4e5a55b174d31

  • SHA512

    62ab225d72542b8cf35b60009f206f8f54d48c6886259fda83360c995522bb5cc2f9ec87700d26307f6a7b3c128fa6124fa7c50a4a8d8971647b048a050a5730

  • SSDEEP

    1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8mVeygryFU2li0gx4EBbhnyLFW+O:chOmTsF93UYfwC6GIoutieyhC2lbgGiB

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8a0ef55e78bd004717cb93c0dc2d5fb0_NeikiAnalytics.exe

    • Size

      89KB

    • MD5

      8a0ef55e78bd004717cb93c0dc2d5fb0

    • SHA1

      926735d3e9c51b8f5e0bc1f1fbd73e5f42defd32

    • SHA256

      c496982ff541c076154dc230d7a34c026fd77cea00c964f73ad4e5a55b174d31

    • SHA512

      62ab225d72542b8cf35b60009f206f8f54d48c6886259fda83360c995522bb5cc2f9ec87700d26307f6a7b3c128fa6124fa7c50a4a8d8971647b048a050a5730

    • SSDEEP

      1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8mVeygryFU2li0gx4EBbhnyLFW+O:chOmTsF93UYfwC6GIoutieyhC2lbgGiB

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks