General

  • Target

    2a3e913357b13787491af6f585e14730_NeikiAnalytics.exe

  • Size

    214KB

  • Sample

    240518-w3a8yagh91

  • MD5

    2a3e913357b13787491af6f585e14730

  • SHA1

    47561dfce54b352e8fbbcecdf3d58f6ad33a9e73

  • SHA256

    cf0b860b7f26e20a2c66174002e7e76ec5610817abfac351f5169cc1c70e1857

  • SHA512

    f360573afcfe5c02776d78deda4af793cf2c8144bd078056913c3cccb7195be3635d79f3b303c36b1a576532f10b97bdc11a368c7adad046a2d335994c502ed9

  • SSDEEP

    3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePe:Zcm7ImGddXEu0ucju6/4kf724f

Malware Config

Targets

    • Target

      2a3e913357b13787491af6f585e14730_NeikiAnalytics.exe

    • Size

      214KB

    • MD5

      2a3e913357b13787491af6f585e14730

    • SHA1

      47561dfce54b352e8fbbcecdf3d58f6ad33a9e73

    • SHA256

      cf0b860b7f26e20a2c66174002e7e76ec5610817abfac351f5169cc1c70e1857

    • SHA512

      f360573afcfe5c02776d78deda4af793cf2c8144bd078056913c3cccb7195be3635d79f3b303c36b1a576532f10b97bdc11a368c7adad046a2d335994c502ed9

    • SSDEEP

      3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePe:Zcm7ImGddXEu0ucju6/4kf724f

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks