General

  • Target

    7fe4ee35b231a57981d50ee6cb1b7f70_NEIKI

  • Size

    449KB

  • Sample

    240508-2j6hmadf76

  • MD5

    7fe4ee35b231a57981d50ee6cb1b7f70

  • SHA1

    fae0ff173b5120229e478466854ac968dfa4a655

  • SHA256

    44b92decc7a364bb50fea1298aefb226f4c01d5790cb24aef0e611034fe74fac

  • SHA512

    fdb869c6d26153f1a9b4442e36473278401e1c9c89204767629b0ae62eaf522e837a280691fa49c2cc266b4a2769ecc14d1c1ff2900f30c6a7d84259ba029302

  • SSDEEP

    12288:64wFHoSJ1zBR/p2r8Cnkhdar2oGNLty6SDXaXIKJcnsjs0STADuO1ve5yqhb:MtBR/Mr8Cnkhdar2oGNLty6SDXaXIKJG

Malware Config

Targets

    • Target

      7fe4ee35b231a57981d50ee6cb1b7f70_NEIKI

    • Size

      449KB

    • MD5

      7fe4ee35b231a57981d50ee6cb1b7f70

    • SHA1

      fae0ff173b5120229e478466854ac968dfa4a655

    • SHA256

      44b92decc7a364bb50fea1298aefb226f4c01d5790cb24aef0e611034fe74fac

    • SHA512

      fdb869c6d26153f1a9b4442e36473278401e1c9c89204767629b0ae62eaf522e837a280691fa49c2cc266b4a2769ecc14d1c1ff2900f30c6a7d84259ba029302

    • SSDEEP

      12288:64wFHoSJ1zBR/p2r8Cnkhdar2oGNLty6SDXaXIKJcnsjs0STADuO1ve5yqhb:MtBR/Mr8Cnkhdar2oGNLty6SDXaXIKJG

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks