General

  • Target

    e7fd367f88740b8901f7ca57788905f0_NeikiAnalytics.exe

  • Size

    62KB

  • Sample

    240519-s69dcsdg4z

  • MD5

    e7fd367f88740b8901f7ca57788905f0

  • SHA1

    3507703a0b0772a316e5c5c9bbc9f49ce5a4a444

  • SHA256

    aec1e23950fe91431d620cd1713c7acb56721abad1e086fddc9e925e3d0bad17

  • SHA512

    0e5a7896e8fd3ed235879d7dabfd3ce1faee1c5d21cd78ca28b9fd1e8d08e30b9da7df7c0fa299d1bb61c512075e4505da89a99867248a94b0a5c2a6457f4cb7

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDISoFGDwQ:ymb3NkkiQ3mdBjFIkl

Malware Config

Targets

    • Target

      e7fd367f88740b8901f7ca57788905f0_NeikiAnalytics.exe

    • Size

      62KB

    • MD5

      e7fd367f88740b8901f7ca57788905f0

    • SHA1

      3507703a0b0772a316e5c5c9bbc9f49ce5a4a444

    • SHA256

      aec1e23950fe91431d620cd1713c7acb56721abad1e086fddc9e925e3d0bad17

    • SHA512

      0e5a7896e8fd3ed235879d7dabfd3ce1faee1c5d21cd78ca28b9fd1e8d08e30b9da7df7c0fa299d1bb61c512075e4505da89a99867248a94b0a5c2a6457f4cb7

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDISoFGDwQ:ymb3NkkiQ3mdBjFIkl

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks