Overview

overview

10

Static

static

3

8e7eb941d0...cs.exe

windows7-x64

10

8e7eb941d0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e7eb941d0d853bd295157c4491339b013184096fe9eb3492dfef6344fd23abf_NeikiAnalytics.exe

  • Size

    342KB

  • Sample

    240628-j9rs2szckh

  • MD5

    6e83d31477236dfbb16e843702527480

  • SHA1

    e1cf16db24e03195e02f8f7924bfaecd8cba8b49

  • SHA256

    8e7eb941d0d853bd295157c4491339b013184096fe9eb3492dfef6344fd23abf

  • SHA512

    10fc0d36e47c9fe2db0724874f4669463a2af126541a9d236e2a9d1c425dc4f0473c781ae99e6d1d8efe0fc6bce533db8967a97616ce930f1d1aba97e884b4fd

  • SSDEEP

    6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYAX:l7TcbWXZshJX2VGdX

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8e7eb941d0d853bd295157c4491339b013184096fe9eb3492dfef6344fd23abf_NeikiAnalytics.exe

    • Size

      342KB

    • MD5

      6e83d31477236dfbb16e843702527480

    • SHA1

      e1cf16db24e03195e02f8f7924bfaecd8cba8b49

    • SHA256

      8e7eb941d0d853bd295157c4491339b013184096fe9eb3492dfef6344fd23abf

    • SHA512

      10fc0d36e47c9fe2db0724874f4669463a2af126541a9d236e2a9d1c425dc4f0473c781ae99e6d1d8efe0fc6bce533db8967a97616ce930f1d1aba97e884b4fd

    • SSDEEP

      6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYAX:l7TcbWXZshJX2VGdX

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks