General

  • Target

    0084e8d51f783f9da03df477723c93a0_NeikiAnalytics

  • Size

    970KB

  • Sample

    240511-n9vbdsfb91

  • MD5

    0084e8d51f783f9da03df477723c93a0

  • SHA1

    552a6ef23ab0e69c5b89203d8adcd1f6401c9db8

  • SHA256

    7757a95b718d40d08f350f236915c498ce2f5f8a15bb483f6c1e48279f8b48b1

  • SHA512

    7c996a15d7b330236afc19dfd7f813f39cafa8d462c8fc335689b02f8d0862f94a0255306c05cab52be0015693c3043968c423d6e765b4375251981eebc55ce3

  • SSDEEP

    12288:n3C9yMo+S0L9xRnoq7H9xqYL04iVypNKvzcMwdBS3b3aoqYveXVadBlHD+CURPOB:SgD4bhoqLDqYLagB6Wj1+CyH

Malware Config

Targets

    • Target

      0084e8d51f783f9da03df477723c93a0_NeikiAnalytics

    • Size

      970KB

    • MD5

      0084e8d51f783f9da03df477723c93a0

    • SHA1

      552a6ef23ab0e69c5b89203d8adcd1f6401c9db8

    • SHA256

      7757a95b718d40d08f350f236915c498ce2f5f8a15bb483f6c1e48279f8b48b1

    • SHA512

      7c996a15d7b330236afc19dfd7f813f39cafa8d462c8fc335689b02f8d0862f94a0255306c05cab52be0015693c3043968c423d6e765b4375251981eebc55ce3

    • SSDEEP

      12288:n3C9yMo+S0L9xRnoq7H9xqYL04iVypNKvzcMwdBS3b3aoqYveXVadBlHD+CURPOB:SgD4bhoqLDqYLagB6Wj1+CyH

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks