General

  • Target

    c7353ce390b294e4fd9328ebeae1c370_NeikiAnalytics.exe

  • Size

    449KB

  • Sample

    240520-he714sga96

  • MD5

    c7353ce390b294e4fd9328ebeae1c370

  • SHA1

    4fb6d558eb1331764ece0ea886dc8d77710a2073

  • SHA256

    01505bdeef1418fe04427d597cce60b7db6da1af669bee793ec8ed3e16bac82d

  • SHA512

    6eaa2698369c5ff9ebd34eca52bbd6de3bc2efeb051ba61e3aa2fcee407c99c9a1d7bf4f60baa8a07995ac1bca4c084d33003885f6c85e2f7cf7da57accc5b1a

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeu:q7Tc2NYHUrAwfMp3CDu

Malware Config

Targets

    • Target

      c7353ce390b294e4fd9328ebeae1c370_NeikiAnalytics.exe

    • Size

      449KB

    • MD5

      c7353ce390b294e4fd9328ebeae1c370

    • SHA1

      4fb6d558eb1331764ece0ea886dc8d77710a2073

    • SHA256

      01505bdeef1418fe04427d597cce60b7db6da1af669bee793ec8ed3e16bac82d

    • SHA512

      6eaa2698369c5ff9ebd34eca52bbd6de3bc2efeb051ba61e3aa2fcee407c99c9a1d7bf4f60baa8a07995ac1bca4c084d33003885f6c85e2f7cf7da57accc5b1a

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeu:q7Tc2NYHUrAwfMp3CDu

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks