Overview

overview

10

Static

static

3

db511ddbfc...cs.exe

windows7-x64

10

db511ddbfc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db511ddbfc26fbb611de9dc35197c220_NeikiAnalytics.exe

  • Size

    88KB

  • Sample

    240616-gsp7sawepp

  • MD5

    db511ddbfc26fbb611de9dc35197c220

  • SHA1

    a18dc21268eda1d9b734f99ec244c41d09b224d9

  • SHA256

    d8034406338e6e579626c404ab5cab3d8b25d801ed5dc7a2122e96c4423bd5d7

  • SHA512

    6253e2a4c6f8caa12ffc3a282422aaa2786f550314bcc70dbab57db9606bb6b0a71bddef11d2c7c3531fc3b21cd37a05bc0921a5a680282b95027aaf8c81aef2

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkB0:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS1S

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      db511ddbfc26fbb611de9dc35197c220_NeikiAnalytics.exe

    • Size

      88KB

    • MD5

      db511ddbfc26fbb611de9dc35197c220

    • SHA1

      a18dc21268eda1d9b734f99ec244c41d09b224d9

    • SHA256

      d8034406338e6e579626c404ab5cab3d8b25d801ed5dc7a2122e96c4423bd5d7

    • SHA512

      6253e2a4c6f8caa12ffc3a282422aaa2786f550314bcc70dbab57db9606bb6b0a71bddef11d2c7c3531fc3b21cd37a05bc0921a5a680282b95027aaf8c81aef2

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkB0:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS1S

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks