Overview

overview

10

Static

static

10

d3af3d5142...cs.exe

windows7-x64

10

d3af3d5142...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3af3d5142b11c8fb767076688c5e790_NeikiAnalytics.exe

  • Size

    431KB

  • Sample

    240524-jrbn4sae33

  • MD5

    d3af3d5142b11c8fb767076688c5e790

  • SHA1

    e95579fbb827aa2ee9b031fe44dccc00171f351d

  • SHA256

    199b2cb92890944469b6eb84f8893f419c48799df164604d0f4ed9b6dc41551d

  • SHA512

    fb93037aaefe8e4ae95b9640d1f409737a0ae8380fcad2c8a6c998e8a09c0ca9e9ec16c3464c81899b86162a2518487322d0bb05d1cc25afe777d04b8b1bbf1f

  • SSDEEP

    3072:TVmHpJqu0Vh6jw/fmZmRMpVuWwP5tOcQfgdVqYHKjoS1HwZCFjTPG1UFNE2XCKUM:TcHpJfHElepVuWwP5YcQfg8J+ojCKC+r

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      d3af3d5142b11c8fb767076688c5e790_NeikiAnalytics.exe

    • Size

      431KB

    • MD5

      d3af3d5142b11c8fb767076688c5e790

    • SHA1

      e95579fbb827aa2ee9b031fe44dccc00171f351d

    • SHA256

      199b2cb92890944469b6eb84f8893f419c48799df164604d0f4ed9b6dc41551d

    • SHA512

      fb93037aaefe8e4ae95b9640d1f409737a0ae8380fcad2c8a6c998e8a09c0ca9e9ec16c3464c81899b86162a2518487322d0bb05d1cc25afe777d04b8b1bbf1f

    • SSDEEP

      3072:TVmHpJqu0Vh6jw/fmZmRMpVuWwP5tOcQfgdVqYHKjoS1HwZCFjTPG1UFNE2XCKUM:TcHpJfHElepVuWwP5YcQfg8J+ojCKC+r

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks