General

  • Target

    3b77d5e7c7a53fa6483990d1ff5b5fe0_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240519-bblv5shg4s

  • MD5

    3b77d5e7c7a53fa6483990d1ff5b5fe0

  • SHA1

    d907ff036204cceda2cf715fbeac9dd292cf6d83

  • SHA256

    f8a695be1b4265999812e5998eb3be0216df18428af46f4473c4972f439c2ed3

  • SHA512

    ea23f6849655529184e90fafdf5ee32eb985e8a61368fe384d6b59c922f5971ff21f99572bb4c0d985dd4563a43d4df382f24cbb463edd4c49859daffb14c7ea

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfMu+:ymb3NkkiQ3mdBjFI4V4u+

Malware Config

Targets

    • Target

      3b77d5e7c7a53fa6483990d1ff5b5fe0_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      3b77d5e7c7a53fa6483990d1ff5b5fe0

    • SHA1

      d907ff036204cceda2cf715fbeac9dd292cf6d83

    • SHA256

      f8a695be1b4265999812e5998eb3be0216df18428af46f4473c4972f439c2ed3

    • SHA512

      ea23f6849655529184e90fafdf5ee32eb985e8a61368fe384d6b59c922f5971ff21f99572bb4c0d985dd4563a43d4df382f24cbb463edd4c49859daffb14c7ea

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfMu+:ymb3NkkiQ3mdBjFI4V4u+

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks