Overview

overview

10

Static

static

7

d2ad58790c...cs.exe

windows7-x64

10

d2ad58790c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2ad58790c761308e4c5ff91c34a3f00_NeikiAnalytics.exe

  • Size

    81KB

  • Sample

    240527-m6rknaab86

  • MD5

    d2ad58790c761308e4c5ff91c34a3f00

  • SHA1

    b0ff71b3d0c6dd83069fa8cb67c94505e93bc86e

  • SHA256

    e40f475534471924d3139052548a1d5127007fbb244ec61a76751815a3315c0f

  • SHA512

    51c2e89e6e7c8d0a15fa7332435ecf2393f209729650f45c556eee728fa3d72d3e92c7e50d095efe4209c9d335314ac5ecb28b036dba7f4e16042c38091747d2

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWxIF5WoZk/:9hOmTsF93UYfwC6GIoutz5yLd5tZM

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d2ad58790c761308e4c5ff91c34a3f00_NeikiAnalytics.exe

    • Size

      81KB

    • MD5

      d2ad58790c761308e4c5ff91c34a3f00

    • SHA1

      b0ff71b3d0c6dd83069fa8cb67c94505e93bc86e

    • SHA256

      e40f475534471924d3139052548a1d5127007fbb244ec61a76751815a3315c0f

    • SHA512

      51c2e89e6e7c8d0a15fa7332435ecf2393f209729650f45c556eee728fa3d72d3e92c7e50d095efe4209c9d335314ac5ecb28b036dba7f4e16042c38091747d2

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWxIF5WoZk/:9hOmTsF93UYfwC6GIoutz5yLd5tZM

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks