General

  • Target

    bc666abacdbdacd952b35f602fa1aa20_NeikiAnalytics.exe

  • Size

    62KB

  • Sample

    240519-plergaha57

  • MD5

    bc666abacdbdacd952b35f602fa1aa20

  • SHA1

    ebeac55021d79a0ca33e3f3535801c84649836b3

  • SHA256

    76e34d187e98d41714bdebfc0cdf24a7eaadcd2ed0ed0e1677604d5aef6a7e21

  • SHA512

    74c51e1f7bbfc5418af666a0e4e2b9bacc2933147436790c4a5f94e97942da03b976eff17b781991a8f78ef0198cdb63baee92e5f1a9841f9f35cc9b54b9d96b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIug6b9FFW:ymb3NkkiQ3mdBjFIugqA

Malware Config

Targets

    • Target

      bc666abacdbdacd952b35f602fa1aa20_NeikiAnalytics.exe

    • Size

      62KB

    • MD5

      bc666abacdbdacd952b35f602fa1aa20

    • SHA1

      ebeac55021d79a0ca33e3f3535801c84649836b3

    • SHA256

      76e34d187e98d41714bdebfc0cdf24a7eaadcd2ed0ed0e1677604d5aef6a7e21

    • SHA512

      74c51e1f7bbfc5418af666a0e4e2b9bacc2933147436790c4a5f94e97942da03b976eff17b781991a8f78ef0198cdb63baee92e5f1a9841f9f35cc9b54b9d96b

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIug6b9FFW:ymb3NkkiQ3mdBjFIugqA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks