General

  • Target

    d028e5e3513e685cb55856b8f55f27b0_NeikiAnalytics.exe

  • Size

    250KB

  • Sample

    240519-q9l15abb41

  • MD5

    d028e5e3513e685cb55856b8f55f27b0

  • SHA1

    da61a8914404a447260c94ccf99c5c1cad70c83a

  • SHA256

    73d36cb205d151683d6e00a57db2015dda73ff344b7587a3e85dbd796435b76c

  • SHA512

    85814a8b3b1a281386f28acd63316548d534245162096603648e4e12aee9cf6b49dea68bde96512e72e550eeb6017a18211394e4ca7c68cb0efc5472973aecc9

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+O:ccm4FmowdHoSi9EIBftapTs4WZazF

Malware Config

Targets

    • Target

      d028e5e3513e685cb55856b8f55f27b0_NeikiAnalytics.exe

    • Size

      250KB

    • MD5

      d028e5e3513e685cb55856b8f55f27b0

    • SHA1

      da61a8914404a447260c94ccf99c5c1cad70c83a

    • SHA256

      73d36cb205d151683d6e00a57db2015dda73ff344b7587a3e85dbd796435b76c

    • SHA512

      85814a8b3b1a281386f28acd63316548d534245162096603648e4e12aee9cf6b49dea68bde96512e72e550eeb6017a18211394e4ca7c68cb0efc5472973aecc9

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+O:ccm4FmowdHoSi9EIBftapTs4WZazF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks