General

  • Target

    5a2490f9960488f2c070c6bce4268bc0_NeikiAnalytics.exe

  • Size

    467KB

  • Sample

    240518-adsk2aac5z

  • MD5

    5a2490f9960488f2c070c6bce4268bc0

  • SHA1

    f68c8f514cc32e3c5f7df47ce49de9708dd22340

  • SHA256

    8f36008688e48c3b31b2334b14f04bc63e1d147616156c103d375cb7246d0d1e

  • SHA512

    d72a7588957993b853238a877300fdf8c13098d0d955772be66c0e09e29578dd127707a54df4d32da93ec1ac68d48ad183d8e627d7ed8841c4ee7b504fe651cb

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93sEqkeGLedW0A8hh1:n3C9yMo+S0L9xRnoq7H9xqYLed35hL

Malware Config

Targets

    • Target

      5a2490f9960488f2c070c6bce4268bc0_NeikiAnalytics.exe

    • Size

      467KB

    • MD5

      5a2490f9960488f2c070c6bce4268bc0

    • SHA1

      f68c8f514cc32e3c5f7df47ce49de9708dd22340

    • SHA256

      8f36008688e48c3b31b2334b14f04bc63e1d147616156c103d375cb7246d0d1e

    • SHA512

      d72a7588957993b853238a877300fdf8c13098d0d955772be66c0e09e29578dd127707a54df4d32da93ec1ac68d48ad183d8e627d7ed8841c4ee7b504fe651cb

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93sEqkeGLedW0A8hh1:n3C9yMo+S0L9xRnoq7H9xqYLed35hL

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks