General

  • Target

    55f3f1b7c2710e650627e100a28572c0_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240524-ssm8zaad9s

  • MD5

    55f3f1b7c2710e650627e100a28572c0

  • SHA1

    9b2db659a9ebd87d2f0021151fc32328e971ca0b

  • SHA256

    bc38d2b192301f1fc183e11454f9ed7d751f37b5341ae69822452f82ae181eec

  • SHA512

    9bc5930b5aff24d83cc1f8711b50cfef99eef47545a15e094eebe829ec38fdaf2695cfb3775b97a39ae3370a32ed53bad15d52fb9aa625451452f0385abd647e

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TVqMJ89J:zhOmTsF93UYfwC6GIoutiTU2HVS6cMJw

Malware Config

Targets

    • Target

      55f3f1b7c2710e650627e100a28572c0_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      55f3f1b7c2710e650627e100a28572c0

    • SHA1

      9b2db659a9ebd87d2f0021151fc32328e971ca0b

    • SHA256

      bc38d2b192301f1fc183e11454f9ed7d751f37b5341ae69822452f82ae181eec

    • SHA512

      9bc5930b5aff24d83cc1f8711b50cfef99eef47545a15e094eebe829ec38fdaf2695cfb3775b97a39ae3370a32ed53bad15d52fb9aa625451452f0385abd647e

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TVqMJ89J:zhOmTsF93UYfwC6GIoutiTU2HVS6cMJw

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks