General

  • Target

    cc0f370851036ddd6d4eafe7f9a87dc0_NeikiAnalytics.exe

  • Size

    305KB

  • Sample

    240518-qkrkbadc51

  • MD5

    cc0f370851036ddd6d4eafe7f9a87dc0

  • SHA1

    3a74d3b515f3ca4ef4ec225ad9387dc3cd7c88c1

  • SHA256

    df551886303d9eef888a15c71968a41a154cd878a41759ea4922176ca851625e

  • SHA512

    1a7d78d718afe9be2cb5cc2c7b1c523ef54a692064529d3190ff43f42c5c75ac4fcef63b621bfa229228f6734f3c1c75ea67016f5537538e44e19ef6968f8845

  • SSDEEP

    6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2v+:n3C9uUnAvtd3Ogld2v+

Malware Config

Targets

    • Target

      cc0f370851036ddd6d4eafe7f9a87dc0_NeikiAnalytics.exe

    • Size

      305KB

    • MD5

      cc0f370851036ddd6d4eafe7f9a87dc0

    • SHA1

      3a74d3b515f3ca4ef4ec225ad9387dc3cd7c88c1

    • SHA256

      df551886303d9eef888a15c71968a41a154cd878a41759ea4922176ca851625e

    • SHA512

      1a7d78d718afe9be2cb5cc2c7b1c523ef54a692064529d3190ff43f42c5c75ac4fcef63b621bfa229228f6734f3c1c75ea67016f5537538e44e19ef6968f8845

    • SSDEEP

      6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2v+:n3C9uUnAvtd3Ogld2v+

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks