General

  • Target

    5cc5a7a490aabf0d4b3e7f1584f446a0_NeikiAnalytics.exe

  • Size

    246KB

  • Sample

    240518-albbqaaf38

  • MD5

    5cc5a7a490aabf0d4b3e7f1584f446a0

  • SHA1

    d3f06b64a9cb6f23ae5c65933eebe856410369a3

  • SHA256

    05e1fd4fbd218047787c66f0c1f176ee3ee68b649f7ddeae45276c52b0a3eb35

  • SHA512

    566d74a8901f3ef3026917f060b7bdf238aac27fbf42381933201148e69abb1cdcfbb2121e27abc9b90fd53b9c77218ba469df18b7709bdf0381156b8173af2d

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4MAWvGjR1A:n3C9BRo7MlrWKo+lxtvGt1A

Malware Config

Targets

    • Target

      5cc5a7a490aabf0d4b3e7f1584f446a0_NeikiAnalytics.exe

    • Size

      246KB

    • MD5

      5cc5a7a490aabf0d4b3e7f1584f446a0

    • SHA1

      d3f06b64a9cb6f23ae5c65933eebe856410369a3

    • SHA256

      05e1fd4fbd218047787c66f0c1f176ee3ee68b649f7ddeae45276c52b0a3eb35

    • SHA512

      566d74a8901f3ef3026917f060b7bdf238aac27fbf42381933201148e69abb1cdcfbb2121e27abc9b90fd53b9c77218ba469df18b7709bdf0381156b8173af2d

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4MAWvGjR1A:n3C9BRo7MlrWKo+lxtvGt1A

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks