General

  • Target

    19679eb7d73db7e6e47e4022c0ca338da136469871496926573e6cf1aa59a031_NeikiAnalytics.exe

  • Size

    67KB

  • Sample

    240620-2tz4lavhlk

  • MD5

    adc93fcfc2623cc47725fdfbfc0ae580

  • SHA1

    adb8ca7635fe8e2bcea1eaa22110f36de244ddaa

  • SHA256

    19679eb7d73db7e6e47e4022c0ca338da136469871496926573e6cf1aa59a031

  • SHA512

    02b144dabc6c07abcfa4f3a09764a0d76e453dbac2cbcc461ed2bed79ad5f633ecce8cbcfca74c6b895f31e9d6c50492d59bc4d09f84f290d74138d5c38ad870

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUPqrDZu:ymb3NkkiQ3mdBjF0yUmA

Malware Config

Targets

    • Target

      19679eb7d73db7e6e47e4022c0ca338da136469871496926573e6cf1aa59a031_NeikiAnalytics.exe

    • Size

      67KB

    • MD5

      adc93fcfc2623cc47725fdfbfc0ae580

    • SHA1

      adb8ca7635fe8e2bcea1eaa22110f36de244ddaa

    • SHA256

      19679eb7d73db7e6e47e4022c0ca338da136469871496926573e6cf1aa59a031

    • SHA512

      02b144dabc6c07abcfa4f3a09764a0d76e453dbac2cbcc461ed2bed79ad5f633ecce8cbcfca74c6b895f31e9d6c50492d59bc4d09f84f290d74138d5c38ad870

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUPqrDZu:ymb3NkkiQ3mdBjF0yUmA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks