General

  • Target

    93cf62c1ae7f3060b75b0638c8c9f810_NeikiAnalytics.exe

  • Size

    54KB

  • Sample

    240519-hfdhwseg8z

  • MD5

    93cf62c1ae7f3060b75b0638c8c9f810

  • SHA1

    fea26c173bfd9f0d6b40b0bd3bb80fceca8e9216

  • SHA256

    2d7dc3bbea6200b0f18dda11e8a39dc090c7efdd785d3261cd55147917c8e9ca

  • SHA512

    9bf1080eab50230e0aebd6e728f75f01ad919dbf70008622ff55453d8ff3564ec5b54efed008da4c131065e3164b6a300e4bf92f2e7f52e757e8a0c382dcd656

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFE:ymb3NkkiQ3mdBjFIFE

Malware Config

Targets

    • Target

      93cf62c1ae7f3060b75b0638c8c9f810_NeikiAnalytics.exe

    • Size

      54KB

    • MD5

      93cf62c1ae7f3060b75b0638c8c9f810

    • SHA1

      fea26c173bfd9f0d6b40b0bd3bb80fceca8e9216

    • SHA256

      2d7dc3bbea6200b0f18dda11e8a39dc090c7efdd785d3261cd55147917c8e9ca

    • SHA512

      9bf1080eab50230e0aebd6e728f75f01ad919dbf70008622ff55453d8ff3564ec5b54efed008da4c131065e3164b6a300e4bf92f2e7f52e757e8a0c382dcd656

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFE:ymb3NkkiQ3mdBjFIFE

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks