Overview

overview

10

Static

static

10

2cac3e4945...cs.exe

windows7-x64

10

2cac3e4945...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cac3e4945f62ba8bf2580e940e0bab0_NeikiAnalytics.exe

  • Size

    464KB

  • Sample

    240518-xakgkshe6w

  • MD5

    2cac3e4945f62ba8bf2580e940e0bab0

  • SHA1

    67eb1d11b9e08fac5e58a7d0fa974be45220f458

  • SHA256

    ec03ebfc883301f6edc58dd3a42d9c4f682c9f792b4557ebf9df7cbf4cc5a482

  • SHA512

    9ebd0d8875220a18b68b1a5d106d1a125e1baf46a1a6d9bfd158c86042f61fb54c7ff91dfefdeef0d61b85c5d8ec58c2b0fba8d14046aa08aea5091a05a895f6

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1Va:VeR0oykayRFp3lztP+OKaf1Va

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      2cac3e4945f62ba8bf2580e940e0bab0_NeikiAnalytics.exe

    • Size

      464KB

    • MD5

      2cac3e4945f62ba8bf2580e940e0bab0

    • SHA1

      67eb1d11b9e08fac5e58a7d0fa974be45220f458

    • SHA256

      ec03ebfc883301f6edc58dd3a42d9c4f682c9f792b4557ebf9df7cbf4cc5a482

    • SHA512

      9ebd0d8875220a18b68b1a5d106d1a125e1baf46a1a6d9bfd158c86042f61fb54c7ff91dfefdeef0d61b85c5d8ec58c2b0fba8d14046aa08aea5091a05a895f6

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1Va:VeR0oykayRFp3lztP+OKaf1Va

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks