General

  • Target

    8e47e164e22968202aa95d07f6de66f0_NeikiAnalytics

  • Size

    277KB

  • Sample

    240509-t2y79sbe8z

  • MD5

    8e47e164e22968202aa95d07f6de66f0

  • SHA1

    97927d6ece491904dbbc71857c849e28b2c64fef

  • SHA256

    b1c9a13a702fe1d93c689018d8ebed0fe17e9930cde74b263bf7ce7ee432bbcc

  • SHA512

    7cafc02b08fb6cd4b6da03ee9cae57433be897456baf6f3069546fd324290cf459f0eed0bb1d0dd151a39696fbc128f66f298df07bd21c2056b40e26511c97a3

  • SSDEEP

    6144:7cm4FmowdHoSoXSBcm4Vcm4FmowdHoSphra+cm4FMhraHcpOaKHpns:B4wFHoSoXW434wFHoS3eg4aeFaKHps

Malware Config

Targets

    • Target

      8e47e164e22968202aa95d07f6de66f0_NeikiAnalytics

    • Size

      277KB

    • MD5

      8e47e164e22968202aa95d07f6de66f0

    • SHA1

      97927d6ece491904dbbc71857c849e28b2c64fef

    • SHA256

      b1c9a13a702fe1d93c689018d8ebed0fe17e9930cde74b263bf7ce7ee432bbcc

    • SHA512

      7cafc02b08fb6cd4b6da03ee9cae57433be897456baf6f3069546fd324290cf459f0eed0bb1d0dd151a39696fbc128f66f298df07bd21c2056b40e26511c97a3

    • SSDEEP

      6144:7cm4FmowdHoSoXSBcm4Vcm4FmowdHoSphra+cm4FMhraHcpOaKHpns:B4wFHoSoXW434wFHoS3eg4aeFaKHps

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks