General

  • Target

    353c65fff5b99108d6f2b3e40da012a0_NeikiAnalytics.exe

  • Size

    453KB

  • Sample

    240519-awfdesgf9v

  • MD5

    353c65fff5b99108d6f2b3e40da012a0

  • SHA1

    b0c28eb254bf839052dc668962d3bc4642fbe728

  • SHA256

    663ccd366e7e7257cef9e72eea93e152bac26284d04aa0c5d698eeb9011b4359

  • SHA512

    b26a0097c397ae64806594d45adf1cba090e29c669894897bd2d9f27d12c48b46d5982ed4dea45fe01505564eb6af86206a5d0436c242787c63bb9e3fcea756a

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmk:x4wFHoS3eFaKHpv/VycgE81lgd

Malware Config

Targets

    • Target

      353c65fff5b99108d6f2b3e40da012a0_NeikiAnalytics.exe

    • Size

      453KB

    • MD5

      353c65fff5b99108d6f2b3e40da012a0

    • SHA1

      b0c28eb254bf839052dc668962d3bc4642fbe728

    • SHA256

      663ccd366e7e7257cef9e72eea93e152bac26284d04aa0c5d698eeb9011b4359

    • SHA512

      b26a0097c397ae64806594d45adf1cba090e29c669894897bd2d9f27d12c48b46d5982ed4dea45fe01505564eb6af86206a5d0436c242787c63bb9e3fcea756a

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmk:x4wFHoS3eFaKHpv/VycgE81lgd

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks