General

  • Target

    26278839b1ab113ee99b0ebea3b7e110_NeikiAnalytics

  • Size

    333KB

  • Sample

    240513-1z7vysfe4s

  • MD5

    26278839b1ab113ee99b0ebea3b7e110

  • SHA1

    bb9e4214e26266ec6346d9b1a625b06ff7c3ff9b

  • SHA256

    d91e093b406f39066df75832866af36614386af11d23e6ec7c5e1d22e91f92c5

  • SHA512

    e94eee49478b2f7f9ee988560a5f54aba42513a53a888e3dc68c524b9ce3227b453a8d98d2b36094c019bb83795d43db3b67a6237d4223534811d54e31d69bb3

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/x:x4wFHoS3eFaKHpv/VycgE8ox

Malware Config

Targets

    • Target

      26278839b1ab113ee99b0ebea3b7e110_NeikiAnalytics

    • Size

      333KB

    • MD5

      26278839b1ab113ee99b0ebea3b7e110

    • SHA1

      bb9e4214e26266ec6346d9b1a625b06ff7c3ff9b

    • SHA256

      d91e093b406f39066df75832866af36614386af11d23e6ec7c5e1d22e91f92c5

    • SHA512

      e94eee49478b2f7f9ee988560a5f54aba42513a53a888e3dc68c524b9ce3227b453a8d98d2b36094c019bb83795d43db3b67a6237d4223534811d54e31d69bb3

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/x:x4wFHoS3eFaKHpv/VycgE8ox

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks