General

  • Target

    e3b957e1106d8281ca34cea26f00a5a0_NeikiAnalytics.exe

  • Size

    63KB

  • Sample

    240520-l4acxsfc5z

  • MD5

    e3b957e1106d8281ca34cea26f00a5a0

  • SHA1

    3aec5e12774ce9fe78d8170eb435b4a61f2ffa04

  • SHA256

    fa998fa49454ad01871b00c3393d46d6b0b49d8fafad6ec628e26a380c37fe5b

  • SHA512

    4718cf1235fb5d4e75fdd7fefea88b5c9f2c67d65e39ca0f1309e408768ac18dbb876d21f3a9b73275fc99f871929f5999e398f57bd796168e4d2e41ec38a455

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJULh12e:ymb3NkkiQ3mdBjFIFdJm/

Malware Config

Targets

    • Target

      e3b957e1106d8281ca34cea26f00a5a0_NeikiAnalytics.exe

    • Size

      63KB

    • MD5

      e3b957e1106d8281ca34cea26f00a5a0

    • SHA1

      3aec5e12774ce9fe78d8170eb435b4a61f2ffa04

    • SHA256

      fa998fa49454ad01871b00c3393d46d6b0b49d8fafad6ec628e26a380c37fe5b

    • SHA512

      4718cf1235fb5d4e75fdd7fefea88b5c9f2c67d65e39ca0f1309e408768ac18dbb876d21f3a9b73275fc99f871929f5999e398f57bd796168e4d2e41ec38a455

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJULh12e:ymb3NkkiQ3mdBjFIFdJm/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks