General

  • Target

    e517229c14a3b84b323c5d1c0d99c200_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240518-s511laaf71

  • MD5

    e517229c14a3b84b323c5d1c0d99c200

  • SHA1

    6ade69dea458f034d52aff78f03fd579f3ba51ae

  • SHA256

    90aacc0baf51002cadafbb2f7d3b6ac6dd0960e4e97e33059a4b0d76498d39ad

  • SHA512

    9dc9cfe19fc728ef5031f74661b72797001d4364d23c2e4fa6af6529cb7f5a86811bc18af04424441b3c03540501f6ea1f378b1fffb4e3a6c939054bb58d855a

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6T7P:zhOmTsF93UYfwC6GIoutiTU2HVS63P

Malware Config

Targets

    • Target

      e517229c14a3b84b323c5d1c0d99c200_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      e517229c14a3b84b323c5d1c0d99c200

    • SHA1

      6ade69dea458f034d52aff78f03fd579f3ba51ae

    • SHA256

      90aacc0baf51002cadafbb2f7d3b6ac6dd0960e4e97e33059a4b0d76498d39ad

    • SHA512

      9dc9cfe19fc728ef5031f74661b72797001d4364d23c2e4fa6af6529cb7f5a86811bc18af04424441b3c03540501f6ea1f378b1fffb4e3a6c939054bb58d855a

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6T7P:zhOmTsF93UYfwC6GIoutiTU2HVS63P

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks