General

  • Target

    2355242f54cb037e6f0b0b98238fb630_NeikiAnalytics.exe

  • Size

    70KB

  • Sample

    240518-3fyt2sdh3z

  • MD5

    2355242f54cb037e6f0b0b98238fb630

  • SHA1

    f1fdb0389c3feeb0015119a20261213b666bdc51

  • SHA256

    8e56cc5658c169ecfaf9bd60e2989b127c6c35bc37fabc8589c869233e4ebb15

  • SHA512

    ece1495beba30393a7946371fd8a8aa8cac7b887f3ad1df0a279d0ef19326ccc16cafdfa6c8e845493508fbde013f3e96d8f621ee92bea782de22732b9e610b7

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb7tAHEqSCkKWSO:ymb3NkkiQ3mdBjFIynIKO

Malware Config

Targets

    • Target

      2355242f54cb037e6f0b0b98238fb630_NeikiAnalytics.exe

    • Size

      70KB

    • MD5

      2355242f54cb037e6f0b0b98238fb630

    • SHA1

      f1fdb0389c3feeb0015119a20261213b666bdc51

    • SHA256

      8e56cc5658c169ecfaf9bd60e2989b127c6c35bc37fabc8589c869233e4ebb15

    • SHA512

      ece1495beba30393a7946371fd8a8aa8cac7b887f3ad1df0a279d0ef19326ccc16cafdfa6c8e845493508fbde013f3e96d8f621ee92bea782de22732b9e610b7

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb7tAHEqSCkKWSO:ymb3NkkiQ3mdBjFIynIKO

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks