Resubmissions

11/05/2024, 16:17

240511-trdtksfa8s 10

11/05/2024, 16:09

240511-tlwr7shf73 10

General

  • Target

    18a96df610f6d9feb0acb5fa4170fd20_NeikiAnalytics

  • Size

    63KB

  • Sample

    240511-trdtksfa8s

  • MD5

    18a96df610f6d9feb0acb5fa4170fd20

  • SHA1

    d3c3b224676c01e47dd869c4346dc05d073a5de3

  • SHA256

    eafbc909e383a3f00522e880e0e7b49c5c84b31d64381c096fc30c22b10ef2cd

  • SHA512

    36cb28f09eaac89aff637b848f2e22b3e164cfe388261bcad71eace963bc35f5ff4a771d8ab1f2397b59194cd3703f06c6b060f8cedae050693aa3af0b4044f4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIhJm/wY:ymb3NkkiQ3mdBjFILm/

Malware Config

Targets

    • Target

      18a96df610f6d9feb0acb5fa4170fd20_NeikiAnalytics

    • Size

      63KB

    • MD5

      18a96df610f6d9feb0acb5fa4170fd20

    • SHA1

      d3c3b224676c01e47dd869c4346dc05d073a5de3

    • SHA256

      eafbc909e383a3f00522e880e0e7b49c5c84b31d64381c096fc30c22b10ef2cd

    • SHA512

      36cb28f09eaac89aff637b848f2e22b3e164cfe388261bcad71eace963bc35f5ff4a771d8ab1f2397b59194cd3703f06c6b060f8cedae050693aa3af0b4044f4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIhJm/wY:ymb3NkkiQ3mdBjFILm/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks