General

  • Target

    06aa51bee03cf4ec44c597248f9a7c40_NeikiAnalytics

  • Size

    253KB

  • Sample

    240514-wm6pxahf64

  • MD5

    06aa51bee03cf4ec44c597248f9a7c40

  • SHA1

    7baf638a17b10460be29ef1df2769e18e154160c

  • SHA256

    f6d0f1845435dce3ad821655a27df61a39133467c2d7ca18004d3af727da888c

  • SHA512

    efcc28ce20fc7ff9ea177ef9ee220ba0ac23bcd44ba2cb5286265d98642cbdfa8b718e76506f293a38da0fa290da2592e9d2284d3972505b708a7aa8bce85751

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THkS:ccm4FmowdHoSi9EIBftapTs4WZazeES

Malware Config

Targets

    • Target

      06aa51bee03cf4ec44c597248f9a7c40_NeikiAnalytics

    • Size

      253KB

    • MD5

      06aa51bee03cf4ec44c597248f9a7c40

    • SHA1

      7baf638a17b10460be29ef1df2769e18e154160c

    • SHA256

      f6d0f1845435dce3ad821655a27df61a39133467c2d7ca18004d3af727da888c

    • SHA512

      efcc28ce20fc7ff9ea177ef9ee220ba0ac23bcd44ba2cb5286265d98642cbdfa8b718e76506f293a38da0fa290da2592e9d2284d3972505b708a7aa8bce85751

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THkS:ccm4FmowdHoSi9EIBftapTs4WZazeES

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks