General

  • Target

    fcbc119198856c71d92e740275e28890_NeikiAnalytics.exe

  • Size

    343KB

  • Sample

    240519-vplxvagh64

  • MD5

    fcbc119198856c71d92e740275e28890

  • SHA1

    65055439ff939d23028daad1238486dd613b38aa

  • SHA256

    8ee894f4eb1997e4ed2b3500053ac2aee7de380c39ec1d34d827044bd967ab9c

  • SHA512

    d94f887fcab6a9a8bb2ee116f9a25948da7cb8726ea2f59bb1dcf99e8b467f52840f871a3315f2df548c060d49128dd08346b51dcf06d3d1a32af284c4fce1a5

  • SSDEEP

    6144:n3C9BRo/AIX2MUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFhXjmnwJQyII:n3C9uDnUXoSWlnwJv90aKToFqwfIBm

Malware Config

Targets

    • Target

      fcbc119198856c71d92e740275e28890_NeikiAnalytics.exe

    • Size

      343KB

    • MD5

      fcbc119198856c71d92e740275e28890

    • SHA1

      65055439ff939d23028daad1238486dd613b38aa

    • SHA256

      8ee894f4eb1997e4ed2b3500053ac2aee7de380c39ec1d34d827044bd967ab9c

    • SHA512

      d94f887fcab6a9a8bb2ee116f9a25948da7cb8726ea2f59bb1dcf99e8b467f52840f871a3315f2df548c060d49128dd08346b51dcf06d3d1a32af284c4fce1a5

    • SSDEEP

      6144:n3C9BRo/AIX2MUXownfWQkyCpxwJz9e0pQowLh3EhToK9cT085mnFhXjmnwJQyII:n3C9uDnUXoSWlnwJv90aKToFqwfIBm

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks