General

  • Target

    215b8033462d2b8a95daf04332fa42f0_NeikiAnalytics.exe

  • Size

    211KB

  • Sample

    240518-weld1afe5y

  • MD5

    215b8033462d2b8a95daf04332fa42f0

  • SHA1

    ec03916c19b509f68e54dadd3c6e39d5dbd1ac6d

  • SHA256

    a125cf2bf2ecb0fba983a8fe18dd28ad420e45dd1fdd95d1b40b600956cb8d8e

  • SHA512

    83cc7605e398a8a9e07be6cc956391b24cdb4c236c7e3d77263263c525024a96fde84258eb8f36a7ffa69a9168be533efd86ac824fcdabe53e5be78ed849b26c

  • SSDEEP

    6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+ly:V4wFHoSBK/ubLcfU

Malware Config

Targets

    • Target

      215b8033462d2b8a95daf04332fa42f0_NeikiAnalytics.exe

    • Size

      211KB

    • MD5

      215b8033462d2b8a95daf04332fa42f0

    • SHA1

      ec03916c19b509f68e54dadd3c6e39d5dbd1ac6d

    • SHA256

      a125cf2bf2ecb0fba983a8fe18dd28ad420e45dd1fdd95d1b40b600956cb8d8e

    • SHA512

      83cc7605e398a8a9e07be6cc956391b24cdb4c236c7e3d77263263c525024a96fde84258eb8f36a7ffa69a9168be533efd86ac824fcdabe53e5be78ed849b26c

    • SSDEEP

      6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+ly:V4wFHoSBK/ubLcfU

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks