General

  • Target

    1b9ef403eae55bb1c7155100cd8db540_NeikiAnalytics

  • Size

    173KB

  • Sample

    240514-yve82aef32

  • MD5

    1b9ef403eae55bb1c7155100cd8db540

  • SHA1

    c11279f01097bca127b48396c08d71e174b118e9

  • SHA256

    6f629cbd3a67196702011c5e68238f5a500cde94b27b657e827d2ae7e58d707e

  • SHA512

    76e0d4955a9eccc721dd3a0f88d20fba4580396b765ac7eaddb808f57cc8940ae5090f427a93d28d2df698826eebcade60ea8e224f50485a65b82a241d664397

  • SSDEEP

    3072:ehOmTsF93UYfwC6GIout1sWRkVap3daVszyKd+XqQz0esujClt+zZ4dMovmW1q7g:ecm4FmowdHoSKWqoFdAszBd+aQz0IClx

Malware Config

Targets

    • Target

      1b9ef403eae55bb1c7155100cd8db540_NeikiAnalytics

    • Size

      173KB

    • MD5

      1b9ef403eae55bb1c7155100cd8db540

    • SHA1

      c11279f01097bca127b48396c08d71e174b118e9

    • SHA256

      6f629cbd3a67196702011c5e68238f5a500cde94b27b657e827d2ae7e58d707e

    • SHA512

      76e0d4955a9eccc721dd3a0f88d20fba4580396b765ac7eaddb808f57cc8940ae5090f427a93d28d2df698826eebcade60ea8e224f50485a65b82a241d664397

    • SSDEEP

      3072:ehOmTsF93UYfwC6GIout1sWRkVap3daVszyKd+XqQz0esujClt+zZ4dMovmW1q7g:ecm4FmowdHoSKWqoFdAszBd+aQz0IClx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks