General

  • Target

    23f52dcc90e7712a02cb0e32750113d0_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240518-wll9wafh4y

  • MD5

    23f52dcc90e7712a02cb0e32750113d0

  • SHA1

    75fec052ae079e02ed43876cdb47926009638f62

  • SHA256

    bd6d781cb6cab75d16c779609ead98735c18845a21b0ebd8be73163d175c1b58

  • SHA512

    003e9327793dfc5b843b3962286ec095266906828b382b2513779953e164986ccf296460232d4f41c4e36db1c1c7aeb50d4f6256345848eb997f3f9b75874ca0

  • SSDEEP

    1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWprCI:8hOmTsF93UYfwC6GIout0fmCiiiXA6mD

Malware Config

Targets

    • Target

      23f52dcc90e7712a02cb0e32750113d0_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      23f52dcc90e7712a02cb0e32750113d0

    • SHA1

      75fec052ae079e02ed43876cdb47926009638f62

    • SHA256

      bd6d781cb6cab75d16c779609ead98735c18845a21b0ebd8be73163d175c1b58

    • SHA512

      003e9327793dfc5b843b3962286ec095266906828b382b2513779953e164986ccf296460232d4f41c4e36db1c1c7aeb50d4f6256345848eb997f3f9b75874ca0

    • SSDEEP

      1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWprCI:8hOmTsF93UYfwC6GIout0fmCiiiXA6mD

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks