General

  • Target

    3ad365078174531d92f42f0122415310_NeikiAnalytics.exe

  • Size

    452KB

  • Sample

    240519-a99jeshh27

  • MD5

    3ad365078174531d92f42f0122415310

  • SHA1

    bdfb1df119b75418c1d9ac60e912d46e0c1178e7

  • SHA256

    9d65a041f23fc4a7358215c3efd0daf2d7867828756f7f63a0aa7a515de0efaa

  • SHA512

    8c8263c91de961851f0d9073e1b4fa39b0e31506ddf9372e688e0d6efee2ecc0f7b1914bdf4b04f711c18c4f47cc9537bbbae027bd1a5137663f2ff2bd32402b

  • SSDEEP

    12288:n3C9ytvnVXl3C9nQIWJJGmFHQ3C9X3C9qAfIZ/o+gZB:SgdnV42RfIJ7d

Malware Config

Targets

    • Target

      3ad365078174531d92f42f0122415310_NeikiAnalytics.exe

    • Size

      452KB

    • MD5

      3ad365078174531d92f42f0122415310

    • SHA1

      bdfb1df119b75418c1d9ac60e912d46e0c1178e7

    • SHA256

      9d65a041f23fc4a7358215c3efd0daf2d7867828756f7f63a0aa7a515de0efaa

    • SHA512

      8c8263c91de961851f0d9073e1b4fa39b0e31506ddf9372e688e0d6efee2ecc0f7b1914bdf4b04f711c18c4f47cc9537bbbae027bd1a5137663f2ff2bd32402b

    • SSDEEP

      12288:n3C9ytvnVXl3C9nQIWJJGmFHQ3C9X3C9qAfIZ/o+gZB:SgdnV42RfIJ7d

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks