General

  • Target

    a4f5360a0b6d03f1d37663a48a2c5050_NeikiAnalytics.exe

  • Size

    327KB

  • Sample

    240520-eegblsba7s

  • MD5

    a4f5360a0b6d03f1d37663a48a2c5050

  • SHA1

    7f2f7546fa559b3c2b45fff3febf3055d4768058

  • SHA256

    ee53314f21144865f362128ec1f658e793a5c05849a18aa7dcb22ee747f9572a

  • SHA512

    f44b6de68f7592b8d61b5ff47a9163180e0b71f6e354f23d49cf1015bedcae01b266f0d9c23837f462fe04792aa196ce6010c745073e5ddd81b31fb21c1e1cd3

  • SSDEEP

    6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRD3:/4wFHoS4d0G8HoljTVhRD3

Malware Config

Targets

    • Target

      a4f5360a0b6d03f1d37663a48a2c5050_NeikiAnalytics.exe

    • Size

      327KB

    • MD5

      a4f5360a0b6d03f1d37663a48a2c5050

    • SHA1

      7f2f7546fa559b3c2b45fff3febf3055d4768058

    • SHA256

      ee53314f21144865f362128ec1f658e793a5c05849a18aa7dcb22ee747f9572a

    • SHA512

      f44b6de68f7592b8d61b5ff47a9163180e0b71f6e354f23d49cf1015bedcae01b266f0d9c23837f462fe04792aa196ce6010c745073e5ddd81b31fb21c1e1cd3

    • SSDEEP

      6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRD3:/4wFHoS4d0G8HoljTVhRD3

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks