General

  • Target

    977ff72bdcdceee1ffd219b0a9d092b0_NeikiAnalytics.exe

  • Size

    91KB

  • Sample

    240518-f4epradf7s

  • MD5

    977ff72bdcdceee1ffd219b0a9d092b0

  • SHA1

    d7cf810c6ad9e039dcf2c20af34f7ab7599a1762

  • SHA256

    dbbd14369d13561b31353c431cb2a5eb43ece4871919fc8a7ac41d9ea10840b7

  • SHA512

    f6daced375a2b77f64d45f26b1e1158f79894c72d996a627a9a05df41715cf5dedcfb009676862f6d290e0bfaaea8e4660744a830935624d55bf213827a510f6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzac0Hobv0byLufTJfJVV:ymb3NkkiQ3mdBjFodt27HobvcyLufNf5

Malware Config

Targets

    • Target

      977ff72bdcdceee1ffd219b0a9d092b0_NeikiAnalytics.exe

    • Size

      91KB

    • MD5

      977ff72bdcdceee1ffd219b0a9d092b0

    • SHA1

      d7cf810c6ad9e039dcf2c20af34f7ab7599a1762

    • SHA256

      dbbd14369d13561b31353c431cb2a5eb43ece4871919fc8a7ac41d9ea10840b7

    • SHA512

      f6daced375a2b77f64d45f26b1e1158f79894c72d996a627a9a05df41715cf5dedcfb009676862f6d290e0bfaaea8e4660744a830935624d55bf213827a510f6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDodtzac0Hobv0byLufTJfJVV:ymb3NkkiQ3mdBjFodt27HobvcyLufNf5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks