Overview

overview

10

Static

static

3

86c86a52c3...cs.exe

windows7-x64

10

86c86a52c3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86c86a52c3e11f28b78628f25f8da35ca9b5d02a0ba354aee535d7866f86453b_NeikiAnalytics.exe

  • Size

    79KB

  • Sample

    240628-fqz4jasfle

  • MD5

    a266b7e16e001f11815ffdf744cb06c0

  • SHA1

    b4f1a0c2a02cb1280551be71d93739043175f294

  • SHA256

    86c86a52c3e11f28b78628f25f8da35ca9b5d02a0ba354aee535d7866f86453b

  • SHA512

    c6d987183b6932b4e0871fe860369a4eecf42586d0bec24746bf31a7f28d40af6e9768db390f5d4bd3b036fa151341266c9a579559ea7d01dfcfdfe82fcb1c47

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgJb31HgxGc+gmvZQCxK:ymb3NkkiQ3mdBjFIUb31HgxL+gmvZjA

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      86c86a52c3e11f28b78628f25f8da35ca9b5d02a0ba354aee535d7866f86453b_NeikiAnalytics.exe

    • Size

      79KB

    • MD5

      a266b7e16e001f11815ffdf744cb06c0

    • SHA1

      b4f1a0c2a02cb1280551be71d93739043175f294

    • SHA256

      86c86a52c3e11f28b78628f25f8da35ca9b5d02a0ba354aee535d7866f86453b

    • SHA512

      c6d987183b6932b4e0871fe860369a4eecf42586d0bec24746bf31a7f28d40af6e9768db390f5d4bd3b036fa151341266c9a579559ea7d01dfcfdfe82fcb1c47

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgJb31HgxGc+gmvZQCxK:ymb3NkkiQ3mdBjFIUb31HgxL+gmvZjA

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks