General

  • Target

    6b6e91891b63d681c255a41f977fcf60_NeikiAnalytics

  • Size

    463KB

  • Sample

    240509-sf5x9aah87

  • MD5

    6b6e91891b63d681c255a41f977fcf60

  • SHA1

    048416cbbf74cff7d0ba87a55bf2bfb2f5bbea47

  • SHA256

    3a1470a8422dd1e057d0876ce1352d09337a95b106a8ece769738b8ff2012999

  • SHA512

    ccf282a808975213770668d0334d35fe8493e44fe3bfe5106ecb06595155bb2f9acbc43697d1453e2149fab99471b4ddef7ea628a0b452c68c9ef972d8cd7536

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1VL:VeR0oykayRFp3lztP+OKaf1VL

Malware Config

Targets

    • Target

      6b6e91891b63d681c255a41f977fcf60_NeikiAnalytics

    • Size

      463KB

    • MD5

      6b6e91891b63d681c255a41f977fcf60

    • SHA1

      048416cbbf74cff7d0ba87a55bf2bfb2f5bbea47

    • SHA256

      3a1470a8422dd1e057d0876ce1352d09337a95b106a8ece769738b8ff2012999

    • SHA512

      ccf282a808975213770668d0334d35fe8493e44fe3bfe5106ecb06595155bb2f9acbc43697d1453e2149fab99471b4ddef7ea628a0b452c68c9ef972d8cd7536

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1VL:VeR0oykayRFp3lztP+OKaf1VL

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks