General

  • Target

    21a6af3e0b390f5f081eb0aa813afad0_NeikiAnalytics.exe

  • Size

    338KB

  • Sample

    240518-3b6dbsdh54

  • MD5

    21a6af3e0b390f5f081eb0aa813afad0

  • SHA1

    1d4efdbcd21a705a6b9d4acf70f8c9d645f9624f

  • SHA256

    d49149d599777b22ccec073e1bc1ecf6da0998267915d247da5000f2324a9de3

  • SHA512

    fadb133ecbe773279f5db416d0071bfb8c692df3950059460c66514f3c68a5836227cd9efb964141b20d80e9ac2fa73531c9de84a8fe4324240acadf3da7b263

  • SSDEEP

    6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnU:U4wFHoSK1zBjA892lY196AUo0LX2tZqi

Malware Config

Targets

    • Target

      21a6af3e0b390f5f081eb0aa813afad0_NeikiAnalytics.exe

    • Size

      338KB

    • MD5

      21a6af3e0b390f5f081eb0aa813afad0

    • SHA1

      1d4efdbcd21a705a6b9d4acf70f8c9d645f9624f

    • SHA256

      d49149d599777b22ccec073e1bc1ecf6da0998267915d247da5000f2324a9de3

    • SHA512

      fadb133ecbe773279f5db416d0071bfb8c692df3950059460c66514f3c68a5836227cd9efb964141b20d80e9ac2fa73531c9de84a8fe4324240acadf3da7b263

    • SSDEEP

      6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnU:U4wFHoSK1zBjA892lY196AUo0LX2tZqi

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks