General

  • Target

    e177a4a09161a9fae3b6f5179c564990_NeikiAnalytics

  • Size

    498KB

  • Sample

    240516-rgtqyagf44

  • MD5

    e177a4a09161a9fae3b6f5179c564990

  • SHA1

    faa3d2a710c6cc66d55ae9e356ea820c6ac9f0b0

  • SHA256

    aaa7f20634fa7025e7a418049d989d53475e1b20ff83c4da3dcd4a30e331ef00

  • SHA512

    e7ac6ec6e657f75be5b910add5c029dcd335c541fc3297b5e5f9f5542e109bbf7b32a2ff10877f7df170b2cf7e22b6f8e45744fa08a9b7de10801428bccd3b35

  • SSDEEP

    12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxS:0KFmFVtrRcFEFmFs

Malware Config

Targets

    • Target

      e177a4a09161a9fae3b6f5179c564990_NeikiAnalytics

    • Size

      498KB

    • MD5

      e177a4a09161a9fae3b6f5179c564990

    • SHA1

      faa3d2a710c6cc66d55ae9e356ea820c6ac9f0b0

    • SHA256

      aaa7f20634fa7025e7a418049d989d53475e1b20ff83c4da3dcd4a30e331ef00

    • SHA512

      e7ac6ec6e657f75be5b910add5c029dcd335c541fc3297b5e5f9f5542e109bbf7b32a2ff10877f7df170b2cf7e22b6f8e45744fa08a9b7de10801428bccd3b35

    • SSDEEP

      12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxS:0KFmFVtrRcFEFmFs

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks