General

  • Target

    43edfb5af6e4d7e3e10cdc05716d4c00_NeikiAnalytics

  • Size

    69KB

  • Sample

    240515-15419aef9v

  • MD5

    43edfb5af6e4d7e3e10cdc05716d4c00

  • SHA1

    371bdd02db9aa2fb9912be898da519f3e2a5ac27

  • SHA256

    7aecb222779a2c868de925fb88d24363cd6b5e6165c372948cc8d9f8634eb478

  • SHA512

    d1e2c04e70e3b8346a1ef0f454147bd6fbb24a03de8824cb7b94e02187252343fb818e47bc8d764b7dde4ba57a7ce466d9a5b87294d258720247ea537e7e2ad4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgUVyiAnm9:ymb3NkkiQ3mdBjFIgUEa

Malware Config

Targets

    • Target

      43edfb5af6e4d7e3e10cdc05716d4c00_NeikiAnalytics

    • Size

      69KB

    • MD5

      43edfb5af6e4d7e3e10cdc05716d4c00

    • SHA1

      371bdd02db9aa2fb9912be898da519f3e2a5ac27

    • SHA256

      7aecb222779a2c868de925fb88d24363cd6b5e6165c372948cc8d9f8634eb478

    • SHA512

      d1e2c04e70e3b8346a1ef0f454147bd6fbb24a03de8824cb7b94e02187252343fb818e47bc8d764b7dde4ba57a7ce466d9a5b87294d258720247ea537e7e2ad4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgUVyiAnm9:ymb3NkkiQ3mdBjFIgUEa

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks