General

  • Target

    0f7eab935f18a0db237788fd9fe280f0_NeikiAnalytics

  • Size

    233KB

  • Sample

    240514-xhcfyabe69

  • MD5

    0f7eab935f18a0db237788fd9fe280f0

  • SHA1

    167f6d1170fb75ed7b94c4a9fd3b48f05f415f75

  • SHA256

    428e6019ffefa82cbe8fbadb38e930c6d1a70241091d159dab625f10a7669b06

  • SHA512

    37c576756bce5c05f981ae4c299115c6a95e084e000b69d626000de237d170c73f7c2c53626cde924a3a49b6c1caba8be5f5e114df6a6a86abe69e83fb658e91

  • SSDEEP

    6144:kcm4FmowdHoSSGpJw4PqhraHcpOmFTHDGYhEf5X2a9R:y4wFHoSSGpJwGeeFmFTNAp2AR

Malware Config

Targets

    • Target

      0f7eab935f18a0db237788fd9fe280f0_NeikiAnalytics

    • Size

      233KB

    • MD5

      0f7eab935f18a0db237788fd9fe280f0

    • SHA1

      167f6d1170fb75ed7b94c4a9fd3b48f05f415f75

    • SHA256

      428e6019ffefa82cbe8fbadb38e930c6d1a70241091d159dab625f10a7669b06

    • SHA512

      37c576756bce5c05f981ae4c299115c6a95e084e000b69d626000de237d170c73f7c2c53626cde924a3a49b6c1caba8be5f5e114df6a6a86abe69e83fb658e91

    • SSDEEP

      6144:kcm4FmowdHoSSGpJw4PqhraHcpOmFTHDGYhEf5X2a9R:y4wFHoSSGpJwGeeFmFTNAp2AR

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks