General

  • Target

    659a1c90517e69a8c4f0d160240d86c01a780910e18236f959b24e8449a19a87_NeikiAnalytics.exe

  • Size

    267KB

  • Sample

    240620-qb69eayflb

  • MD5

    72f0266ac9241c0ab370b61c4f961180

  • SHA1

    8347d796b28782575c4a054d665c67dc75925601

  • SHA256

    659a1c90517e69a8c4f0d160240d86c01a780910e18236f959b24e8449a19a87

  • SHA512

    cd88d80556b814bdfe9a4c3f1aa833a29944a7bd1f2a6c26084560cd46816e846df1db430ef68a519b23a095af768b95b9a06e13003b9568e27f22f95c7cec23

  • SSDEEP

    6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmO:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPF

Malware Config

Targets

    • Target

      659a1c90517e69a8c4f0d160240d86c01a780910e18236f959b24e8449a19a87_NeikiAnalytics.exe

    • Size

      267KB

    • MD5

      72f0266ac9241c0ab370b61c4f961180

    • SHA1

      8347d796b28782575c4a054d665c67dc75925601

    • SHA256

      659a1c90517e69a8c4f0d160240d86c01a780910e18236f959b24e8449a19a87

    • SHA512

      cd88d80556b814bdfe9a4c3f1aa833a29944a7bd1f2a6c26084560cd46816e846df1db430ef68a519b23a095af768b95b9a06e13003b9568e27f22f95c7cec23

    • SSDEEP

      6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmO:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks