Overview

overview

10

Static

static

3

115144198e...cs.exe

windows7-x64

10

115144198e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    115144198eec38d0e7619f462f2ae7d0_NeikiAnalytics.exe

  • Size

    146KB

  • Sample

    240603-3gb2nsda4s

  • MD5

    115144198eec38d0e7619f462f2ae7d0

  • SHA1

    f89092fd990a9d3f41dbead8fd2b480310a5a7f6

  • SHA256

    9853ac08b8a25d003ddc43ce4268e0e5d54c4ca7eaf88d8a2b91a4d8c5748ef7

  • SHA512

    f9d7631e8373eab88185f5e4fac4b9b43e8c1624771e5bd9bb942d474bfbf9f402c4a9cef84334e2acce6c25e1661eed6490bea28c763f62c76cc28c0cb389c3

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gFbctg0IyAyhZvjDUOy/nmPmT9sen:n3C9BRo7tvnJ9oH0IRgZvjDhy+Pmxsen

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      115144198eec38d0e7619f462f2ae7d0_NeikiAnalytics.exe

    • Size

      146KB

    • MD5

      115144198eec38d0e7619f462f2ae7d0

    • SHA1

      f89092fd990a9d3f41dbead8fd2b480310a5a7f6

    • SHA256

      9853ac08b8a25d003ddc43ce4268e0e5d54c4ca7eaf88d8a2b91a4d8c5748ef7

    • SHA512

      f9d7631e8373eab88185f5e4fac4b9b43e8c1624771e5bd9bb942d474bfbf9f402c4a9cef84334e2acce6c25e1661eed6490bea28c763f62c76cc28c0cb389c3

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gFbctg0IyAyhZvjDUOy/nmPmT9sen:n3C9BRo7tvnJ9oH0IRgZvjDhy+Pmxsen

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks