General

  • Target

    46b8f73839e1553a7fa7a21a7ac56916f226c11179e96fd6fc361715d54f0e23_NeikiAnalytics

  • Size

    328KB

  • Sample

    240521-paktcadb48

  • MD5

    80d599f3a116bea8867625098bf51160

  • SHA1

    1df09ce73ccc6d51d4dcdccaf0a974a0d6094529

  • SHA256

    46b8f73839e1553a7fa7a21a7ac56916f226c11179e96fd6fc361715d54f0e23

  • SHA512

    bc014c7bd33eca7be0fac4f37b6bf0b28cbc310855ad80d97505b42850758f11035d6e1b18ac475191eb20eb8f3b670f61a61d86b5711b7f898b97489caa367e

  • SSDEEP

    6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbem:R4wFHoSHYHUrAwfMp3CDm

Malware Config

Targets

    • Target

      46b8f73839e1553a7fa7a21a7ac56916f226c11179e96fd6fc361715d54f0e23_NeikiAnalytics

    • Size

      328KB

    • MD5

      80d599f3a116bea8867625098bf51160

    • SHA1

      1df09ce73ccc6d51d4dcdccaf0a974a0d6094529

    • SHA256

      46b8f73839e1553a7fa7a21a7ac56916f226c11179e96fd6fc361715d54f0e23

    • SHA512

      bc014c7bd33eca7be0fac4f37b6bf0b28cbc310855ad80d97505b42850758f11035d6e1b18ac475191eb20eb8f3b670f61a61d86b5711b7f898b97489caa367e

    • SSDEEP

      6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbem:R4wFHoSHYHUrAwfMp3CDm

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks