General

  • Target

    534618ceaa18345134ac451d65d039a0_NeikiAnalytics.exe

  • Size

    59KB

  • Sample

    240519-ct4dksdf2w

  • MD5

    534618ceaa18345134ac451d65d039a0

  • SHA1

    3f0a0a01fdfac23edf147da2a07d65acb66f7f0e

  • SHA256

    186cac11b588b7e2f7bc7970a0aeca9dfd779f3f2ca241d8b90b701e83ea6eff

  • SHA512

    55aa777bc8287307b5b26e1903a06bcfef9d22bbc8777c4d742ed9f6e1404955793719bac3110ba67baa7a011dba146887dbd8cabd6c866b71f5c9b470e998e9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzkzp:ymb3NkkiQ3mdBjFIvlF

Malware Config

Targets

    • Target

      534618ceaa18345134ac451d65d039a0_NeikiAnalytics.exe

    • Size

      59KB

    • MD5

      534618ceaa18345134ac451d65d039a0

    • SHA1

      3f0a0a01fdfac23edf147da2a07d65acb66f7f0e

    • SHA256

      186cac11b588b7e2f7bc7970a0aeca9dfd779f3f2ca241d8b90b701e83ea6eff

    • SHA512

      55aa777bc8287307b5b26e1903a06bcfef9d22bbc8777c4d742ed9f6e1404955793719bac3110ba67baa7a011dba146887dbd8cabd6c866b71f5c9b470e998e9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzkzp:ymb3NkkiQ3mdBjFIvlF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks