General

  • Target

    3a4323961f72bbc9a6741277656f5dc0_NeikiAnalytics.exe

  • Size

    214KB

  • Sample

    240519-a82r7ahe6w

  • MD5

    3a4323961f72bbc9a6741277656f5dc0

  • SHA1

    7e95e59bab8840d3bdbb96710620fd2681d036c2

  • SHA256

    5dffff5210f8abd8702f918ea22d1fe33d991fc675057309db3e9328d3bf9221

  • SHA512

    382ec781697d937b01bf05552f5bbdffee4187b8bfbf61b2738a2da74781abeacc214af81a27a5c9982b04cb5594c1dd726263783ed120a3cb70741a47ec4afb

  • SSDEEP

    3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePaP:Zcm7ImGddXEu0ucju6/4kf724Z

Malware Config

Targets

    • Target

      3a4323961f72bbc9a6741277656f5dc0_NeikiAnalytics.exe

    • Size

      214KB

    • MD5

      3a4323961f72bbc9a6741277656f5dc0

    • SHA1

      7e95e59bab8840d3bdbb96710620fd2681d036c2

    • SHA256

      5dffff5210f8abd8702f918ea22d1fe33d991fc675057309db3e9328d3bf9221

    • SHA512

      382ec781697d937b01bf05552f5bbdffee4187b8bfbf61b2738a2da74781abeacc214af81a27a5c9982b04cb5594c1dd726263783ed120a3cb70741a47ec4afb

    • SSDEEP

      3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePaP:Zcm7ImGddXEu0ucju6/4kf724Z

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks