General

  • Target

    cc52a3035d9ca90f37f132fecb377dd0_NeikiAnalytics.exe

  • Size

    77KB

  • Sample

    240519-qyt8csag7s

  • MD5

    cc52a3035d9ca90f37f132fecb377dd0

  • SHA1

    c5e2d2d660ed13d746fc0ae4becfa0e17fa41c1d

  • SHA256

    540430fc01961d14776753abd313eb49e45130603a3192de798e8c0d842d2ff4

  • SHA512

    b23cb46ab8be3428f012b1b8922dc2e109bc56e3283d2b589af7fc6386c18ab374911a4b9e79b2e34bf81a0a12423989075e213596207a835aeb2450f7105e28

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dOYz:ymb3NkkiQ3mdBjFo7LAIbTz

Malware Config

Targets

    • Target

      cc52a3035d9ca90f37f132fecb377dd0_NeikiAnalytics.exe

    • Size

      77KB

    • MD5

      cc52a3035d9ca90f37f132fecb377dd0

    • SHA1

      c5e2d2d660ed13d746fc0ae4becfa0e17fa41c1d

    • SHA256

      540430fc01961d14776753abd313eb49e45130603a3192de798e8c0d842d2ff4

    • SHA512

      b23cb46ab8be3428f012b1b8922dc2e109bc56e3283d2b589af7fc6386c18ab374911a4b9e79b2e34bf81a0a12423989075e213596207a835aeb2450f7105e28

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dOYz:ymb3NkkiQ3mdBjFo7LAIbTz

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks