General

  • Target

    148cbbc6b57015127708168ad0edbc70_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240526-t8fphada3y

  • MD5

    148cbbc6b57015127708168ad0edbc70

  • SHA1

    fb61540e8b6cab5fc909a54b36ff0e4f8e7beb98

  • SHA256

    057fcd58b91d546e7a2f4ae32a9d31c6c5b84abea56d99b5a7f0cfb6424c9760

  • SHA512

    988b6e52c8ae8e4fbbeee23afbfb8af181aa5f79891b2dd972287de417f8c7ba7ae38980a8905a8508bb991b3210978352090736f37df0b9a8569cf839204d17

  • SSDEEP

    1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpW4:8hOmTsF93UYfwC6GIout0fmCiiiXA6mH

Malware Config

Targets

    • Target

      148cbbc6b57015127708168ad0edbc70_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      148cbbc6b57015127708168ad0edbc70

    • SHA1

      fb61540e8b6cab5fc909a54b36ff0e4f8e7beb98

    • SHA256

      057fcd58b91d546e7a2f4ae32a9d31c6c5b84abea56d99b5a7f0cfb6424c9760

    • SHA512

      988b6e52c8ae8e4fbbeee23afbfb8af181aa5f79891b2dd972287de417f8c7ba7ae38980a8905a8508bb991b3210978352090736f37df0b9a8569cf839204d17

    • SSDEEP

      1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpW4:8hOmTsF93UYfwC6GIout0fmCiiiXA6mH

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks