General

  • Target

    e49df22051443a2a5b604c1cdd1678e0_NeikiAnalytics.exe

  • Size

    381KB

  • Sample

    240519-syxpladb28

  • MD5

    e49df22051443a2a5b604c1cdd1678e0

  • SHA1

    efd2d4ada226034145237559c1ba8594b6927a00

  • SHA256

    4c88fd744de2aae7894b133fcba7d652c44dd9ed12b1ec22597fa9ce25c130b5

  • SHA512

    22b93bda0713faf319a35eaeb3a0a2c561eb37b640d7c4f7cd21f7465f17bd2d3df4bb7a0c2429df29bbeba165369e19efd1d0d283ff6600748feb4d4cd93e50

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYT2:y4wFHoS3eFaKHpNKbbswe2

Malware Config

Targets

    • Target

      e49df22051443a2a5b604c1cdd1678e0_NeikiAnalytics.exe

    • Size

      381KB

    • MD5

      e49df22051443a2a5b604c1cdd1678e0

    • SHA1

      efd2d4ada226034145237559c1ba8594b6927a00

    • SHA256

      4c88fd744de2aae7894b133fcba7d652c44dd9ed12b1ec22597fa9ce25c130b5

    • SHA512

      22b93bda0713faf319a35eaeb3a0a2c561eb37b640d7c4f7cd21f7465f17bd2d3df4bb7a0c2429df29bbeba165369e19efd1d0d283ff6600748feb4d4cd93e50

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYT2:y4wFHoS3eFaKHpNKbbswe2

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks