General

  • Target

    52bc9a720150b31b54507e6e1ff53870_NeikiAnalytics.exe

  • Size

    93KB

  • Sample

    240519-cst4hsde5v

  • MD5

    52bc9a720150b31b54507e6e1ff53870

  • SHA1

    125c2090cc51b06b2b696897b222c61258526eda

  • SHA256

    2513d1c12104c89c18494b5b41858a8462e743cd092d69af1fce6c7726619ecf

  • SHA512

    f179a59b5566858b9790e31476cfd1c1a427ec9f622bd502613362563332a8b1b332351dd93589b5c22fd9ab992c7e18a20313cf9f4e3aea62e3281f9f8d73a7

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7NANTBuQG1np24+2OXA:ymb3NkkiQ3mdBjFo7NguQG1n0USA

Malware Config

Targets

    • Target

      52bc9a720150b31b54507e6e1ff53870_NeikiAnalytics.exe

    • Size

      93KB

    • MD5

      52bc9a720150b31b54507e6e1ff53870

    • SHA1

      125c2090cc51b06b2b696897b222c61258526eda

    • SHA256

      2513d1c12104c89c18494b5b41858a8462e743cd092d69af1fce6c7726619ecf

    • SHA512

      f179a59b5566858b9790e31476cfd1c1a427ec9f622bd502613362563332a8b1b332351dd93589b5c22fd9ab992c7e18a20313cf9f4e3aea62e3281f9f8d73a7

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7NANTBuQG1np24+2OXA:ymb3NkkiQ3mdBjFo7NguQG1n0USA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks