General

  • Target

    0d24812ff9a62bf9c8ec60ca5392b950_NeikiAnalytics

  • Size

    81KB

  • Sample

    240509-16egzscg98

  • MD5

    0d24812ff9a62bf9c8ec60ca5392b950

  • SHA1

    3e41e8a79936cc3eb8c45da06e58575263ded0ea

  • SHA256

    406d715393fb856dbebc89556b7aedc1dee79d9d6a843efe59fc7cb4e2168ffa

  • SHA512

    f386361e467e5c281340e18cef33052cb22009cf084c0e37f5f0f0ce41d5994ee2e9f923e6cc69d3c680b5a32c7839db43a1f871cf61807a1ac00979632e280b

  • SSDEEP

    1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8AelS7/7VIQHW:ChOmTsF93UYfwC6GIoutAe07zVIqW

Malware Config

Targets

    • Target

      0d24812ff9a62bf9c8ec60ca5392b950_NeikiAnalytics

    • Size

      81KB

    • MD5

      0d24812ff9a62bf9c8ec60ca5392b950

    • SHA1

      3e41e8a79936cc3eb8c45da06e58575263ded0ea

    • SHA256

      406d715393fb856dbebc89556b7aedc1dee79d9d6a843efe59fc7cb4e2168ffa

    • SHA512

      f386361e467e5c281340e18cef33052cb22009cf084c0e37f5f0f0ce41d5994ee2e9f923e6cc69d3c680b5a32c7839db43a1f871cf61807a1ac00979632e280b

    • SSDEEP

      1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8AelS7/7VIQHW:ChOmTsF93UYfwC6GIoutAe07zVIqW

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks