General

  • Target

    a96dd4eb94155e73dcec598f545eb130_NeikiAnalytics

  • Size

    94KB

  • Sample

    240516-gkzfgsfa63

  • MD5

    a96dd4eb94155e73dcec598f545eb130

  • SHA1

    363e70c93e627a87a9a87bb64280eef10dad4b18

  • SHA256

    6cb8fb268273d6db25f2d569f9e414860ffb16f36cb58dafa638404f1b8ee1a7

  • SHA512

    861976f34b1aa141097dcdc028eb8e1eb3ec453fa625142a64cfe2f4b183d2daaf47e6428067c29019b8002e0e13254fc80f96e95869c2cc0b134eb16002dcbf

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JxJAg8dtr:ymb3NkkiQ3mdBjFIWeFGyAsJAg2r

Malware Config

Targets

    • Target

      a96dd4eb94155e73dcec598f545eb130_NeikiAnalytics

    • Size

      94KB

    • MD5

      a96dd4eb94155e73dcec598f545eb130

    • SHA1

      363e70c93e627a87a9a87bb64280eef10dad4b18

    • SHA256

      6cb8fb268273d6db25f2d569f9e414860ffb16f36cb58dafa638404f1b8ee1a7

    • SHA512

      861976f34b1aa141097dcdc028eb8e1eb3ec453fa625142a64cfe2f4b183d2daaf47e6428067c29019b8002e0e13254fc80f96e95869c2cc0b134eb16002dcbf

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JxJAg8dtr:ymb3NkkiQ3mdBjFIWeFGyAsJAg2r

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks