General

  • Target

    618c77a64c297967e62672e017f758e0_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240518-a2g47sbf5v

  • MD5

    618c77a64c297967e62672e017f758e0

  • SHA1

    ce568d1639f81e5eee27bc1a86239af810435290

  • SHA256

    a0db4ad8af4a361ee64eac4d0f07638c484b382a8277997175520ca966255a91

  • SHA512

    afc6d3d6076661993d9362d21ac675ea138dc227f2a0730ced7ae12c97ba934e810493b5bcdc9ea71bbea824fd0d59829b7da07753aca9cdd2823cec9ac3a5f6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFN:ymb3NkkiQ3mdBjFIFN

Malware Config

Targets

    • Target

      618c77a64c297967e62672e017f758e0_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      618c77a64c297967e62672e017f758e0

    • SHA1

      ce568d1639f81e5eee27bc1a86239af810435290

    • SHA256

      a0db4ad8af4a361ee64eac4d0f07638c484b382a8277997175520ca966255a91

    • SHA512

      afc6d3d6076661993d9362d21ac675ea138dc227f2a0730ced7ae12c97ba934e810493b5bcdc9ea71bbea824fd0d59829b7da07753aca9cdd2823cec9ac3a5f6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFN:ymb3NkkiQ3mdBjFIFN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks