General

  • Target

    02b82c7f649ecd964bdca11c4632dbb0a90641a50e651de141e7352cf6282c6b_NeikiAnalytics.exe

  • Size

    112KB

  • Sample

    240620-txmnnswhrc

  • MD5

    3ced20f4c6c5db0cbdff6a65cc5aef00

  • SHA1

    95a32bbb1326d56216e83c3cd7bb129620fd0d4b

  • SHA256

    02b82c7f649ecd964bdca11c4632dbb0a90641a50e651de141e7352cf6282c6b

  • SHA512

    b4dd62d2b9377cad6d6d4a89bdf5a33004e59967078e60c4b64c6edcfd39f64fde724d062f5bd26f99870a1b2a29f60dab34d00f8fbf99406d73e8607ec0eb54

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afowpDyJo1ZFY:n3C9BRW0j/wtyJv

Malware Config

Targets

    • Target

      02b82c7f649ecd964bdca11c4632dbb0a90641a50e651de141e7352cf6282c6b_NeikiAnalytics.exe

    • Size

      112KB

    • MD5

      3ced20f4c6c5db0cbdff6a65cc5aef00

    • SHA1

      95a32bbb1326d56216e83c3cd7bb129620fd0d4b

    • SHA256

      02b82c7f649ecd964bdca11c4632dbb0a90641a50e651de141e7352cf6282c6b

    • SHA512

      b4dd62d2b9377cad6d6d4a89bdf5a33004e59967078e60c4b64c6edcfd39f64fde724d062f5bd26f99870a1b2a29f60dab34d00f8fbf99406d73e8607ec0eb54

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afowpDyJo1ZFY:n3C9BRW0j/wtyJv

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks