General

  • Target

    d7f3ae01bbcae1fdc920897ab9890270_NeikiAnalytics.exe

  • Size

    251KB

  • Sample

    240518-rwjvaagb29

  • MD5

    d7f3ae01bbcae1fdc920897ab9890270

  • SHA1

    93048369d15f5adea2c75f792a37f88663b09bdf

  • SHA256

    c1b12fdf3a1342dc5e96dc9851bec8f50eb260a923b1ed91ac7a0e8f46361329

  • SHA512

    384595fe766ee908f7afb12bf19ae737424a3b9537da7415b544dc6440e5245bc9f8270bf276a3e6f47e31b898d88a1a908931700294b4d6c081e94875e3555f

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+F:ccm4FmowdHoSi9EIBftapTs4WZaz0

Malware Config

Targets

    • Target

      d7f3ae01bbcae1fdc920897ab9890270_NeikiAnalytics.exe

    • Size

      251KB

    • MD5

      d7f3ae01bbcae1fdc920897ab9890270

    • SHA1

      93048369d15f5adea2c75f792a37f88663b09bdf

    • SHA256

      c1b12fdf3a1342dc5e96dc9851bec8f50eb260a923b1ed91ac7a0e8f46361329

    • SHA512

      384595fe766ee908f7afb12bf19ae737424a3b9537da7415b544dc6440e5245bc9f8270bf276a3e6f47e31b898d88a1a908931700294b4d6c081e94875e3555f

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+F:ccm4FmowdHoSi9EIBftapTs4WZaz0

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks