General

  • Target

    43e0a7c13fe9be5c5ac825cb9e76c420_NeikiAnalytics.exe

  • Size

    191KB

  • Sample

    240519-1rnr4sbh6w

  • MD5

    43e0a7c13fe9be5c5ac825cb9e76c420

  • SHA1

    7e17f32c2a98ccfba732f534f5bbbfd8beb5e98f

  • SHA256

    db8f9030ea084cc821b6ac446114b7475ff614c87ba3fcc81dc00bb8c8cea5a1

  • SHA512

    afbdf5553b069b0c8573d83962d4a0d23ab8e051500db9f99bbc13c423dac0628d45758200b02fdaac2d60f60d1a4c3cdaededfbf26f7121a2fee346117f5b0d

  • SSDEEP

    3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSaD:Fcm4FmowdHoS8fMoSVAHubPtyYxfPD

Malware Config

Targets

    • Target

      43e0a7c13fe9be5c5ac825cb9e76c420_NeikiAnalytics.exe

    • Size

      191KB

    • MD5

      43e0a7c13fe9be5c5ac825cb9e76c420

    • SHA1

      7e17f32c2a98ccfba732f534f5bbbfd8beb5e98f

    • SHA256

      db8f9030ea084cc821b6ac446114b7475ff614c87ba3fcc81dc00bb8c8cea5a1

    • SHA512

      afbdf5553b069b0c8573d83962d4a0d23ab8e051500db9f99bbc13c423dac0628d45758200b02fdaac2d60f60d1a4c3cdaededfbf26f7121a2fee346117f5b0d

    • SSDEEP

      3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSaD:Fcm4FmowdHoS8fMoSVAHubPtyYxfPD

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks