Overview

overview

10

Static

static

10

22503b3443...cs.exe

windows7-x64

10

22503b3443...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    22503b3443d8f1911e70065194f0e4e0_NeikiAnalytics

  • Size

    483KB

  • Sample

    240510-2vq73see3w

  • MD5

    22503b3443d8f1911e70065194f0e4e0

  • SHA1

    2c805812528f7dd454700535275c785b757c59b5

  • SHA256

    f49f1e5b7b31449391841b356553c39c8d00a19cbb1e71f9e8089111e302394f

  • SHA512

    f88e1f28ea1faa7c216bf11e643bd8548504e2dbc57089158c2cb193e390135afc7c4636b82aca1dbdb4cab641b9f4f81f4aaccd5fa531184dfbf27724d41f2c

  • SSDEEP

    12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888n5:Cu49lmPh2kkkkK4kXkkkkkkkkf

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      22503b3443d8f1911e70065194f0e4e0_NeikiAnalytics

    • Size

      483KB

    • MD5

      22503b3443d8f1911e70065194f0e4e0

    • SHA1

      2c805812528f7dd454700535275c785b757c59b5

    • SHA256

      f49f1e5b7b31449391841b356553c39c8d00a19cbb1e71f9e8089111e302394f

    • SHA512

      f88e1f28ea1faa7c216bf11e643bd8548504e2dbc57089158c2cb193e390135afc7c4636b82aca1dbdb4cab641b9f4f81f4aaccd5fa531184dfbf27724d41f2c

    • SSDEEP

      12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888n5:Cu49lmPh2kkkkK4kXkkkkkkkkf

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks