General

  • Target

    d4ae5073cca14d30ace62640b30b85e0_NeikiAnalytics

  • Size

    69KB

  • Sample

    240515-qz5qgscb97

  • MD5

    d4ae5073cca14d30ace62640b30b85e0

  • SHA1

    acc35cc20e2e743d72197b5db877507cf373e8ae

  • SHA256

    00696f9deb4034eece90e328e3ee00c024d341095ad919becc6f666755f0179f

  • SHA512

    bf8155e6ba40fb33b3f31a0d7cf87c35f90e7d655dca8e1ad449b145b023c1414e1113b09af2d41fc04c89d3a356342f4d1ec45aa082519e04e3124ad9def59e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUwcsbY3f:ymb3NkkiQ3mdBjF0yjcsMP

Malware Config

Targets

    • Target

      d4ae5073cca14d30ace62640b30b85e0_NeikiAnalytics

    • Size

      69KB

    • MD5

      d4ae5073cca14d30ace62640b30b85e0

    • SHA1

      acc35cc20e2e743d72197b5db877507cf373e8ae

    • SHA256

      00696f9deb4034eece90e328e3ee00c024d341095ad919becc6f666755f0179f

    • SHA512

      bf8155e6ba40fb33b3f31a0d7cf87c35f90e7d655dca8e1ad449b145b023c1414e1113b09af2d41fc04c89d3a356342f4d1ec45aa082519e04e3124ad9def59e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUwcsbY3f:ymb3NkkiQ3mdBjF0yjcsMP

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks