General

  • Target

    7491c602491565c79401d5069cd1cc70_NeikiAnalytics.exe

  • Size

    77KB

  • Sample

    240520-a69d9abg89

  • MD5

    7491c602491565c79401d5069cd1cc70

  • SHA1

    59a4d7edb20fa7151d15bae83182b0fe6018fc40

  • SHA256

    42661d71b8c18c6a0ff7816cd7b3debcee0bf04e01447149f7e4cf52a6e1a0c0

  • SHA512

    8859ba0cca188eeb30010ed7f9a903b8bfb7d71025d5c685440a7ff2a60da0fe99e527f9e9bef7c2bb9c0ba0966ea5aa52cdf1e548947d818880760ea248b171

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdcE:ymb3NkkiQ3mdBjFo68YBVIJc9JtxE

Malware Config

Targets

    • Target

      7491c602491565c79401d5069cd1cc70_NeikiAnalytics.exe

    • Size

      77KB

    • MD5

      7491c602491565c79401d5069cd1cc70

    • SHA1

      59a4d7edb20fa7151d15bae83182b0fe6018fc40

    • SHA256

      42661d71b8c18c6a0ff7816cd7b3debcee0bf04e01447149f7e4cf52a6e1a0c0

    • SHA512

      8859ba0cca188eeb30010ed7f9a903b8bfb7d71025d5c685440a7ff2a60da0fe99e527f9e9bef7c2bb9c0ba0966ea5aa52cdf1e548947d818880760ea248b171

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdcE:ymb3NkkiQ3mdBjFo68YBVIJc9JtxE

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks