General

  • Target

    ade7abd75cf0fe86ca1f1cb67c6ee500_NeikiAnalytics.exe

  • Size

    55KB

  • Sample

    240524-fmz95aec9z

  • MD5

    ade7abd75cf0fe86ca1f1cb67c6ee500

  • SHA1

    23817c5be3e4a3bfa35f2dbaea330cb283a6909a

  • SHA256

    483c74cf221d317f2fe14c9c213abc8a5a325266afb996caa99ee50c6e799165

  • SHA512

    f58beff69aa6c6033de34b5e4f0951c4d2ba1f27854472fd662c78b2be06efffbd6fafd0a638148f1dfb3c8e4d862b784525752a245af89ba97a07613160b5e2

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFPb:ymb3NkkiQ3mdBjFIFPb

Malware Config

Targets

    • Target

      ade7abd75cf0fe86ca1f1cb67c6ee500_NeikiAnalytics.exe

    • Size

      55KB

    • MD5

      ade7abd75cf0fe86ca1f1cb67c6ee500

    • SHA1

      23817c5be3e4a3bfa35f2dbaea330cb283a6909a

    • SHA256

      483c74cf221d317f2fe14c9c213abc8a5a325266afb996caa99ee50c6e799165

    • SHA512

      f58beff69aa6c6033de34b5e4f0951c4d2ba1f27854472fd662c78b2be06efffbd6fafd0a638148f1dfb3c8e4d862b784525752a245af89ba97a07613160b5e2

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFPb:ymb3NkkiQ3mdBjFIFPb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks