Overview

overview

10

Static

static

10

cc90a1cb9b...cs.exe

windows7-x64

10

cc90a1cb9b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc90a1cb9b24eb005caabedab0c11450_NeikiAnalytics.exe

  • Size

    245KB

  • Sample

    240519-qy5dbsaf55

  • MD5

    cc90a1cb9b24eb005caabedab0c11450

  • SHA1

    3e4bd14268e0d861cab9d9c66ca29b5cea905ad2

  • SHA256

    8d1f51b8c32f599455a6b30dab4aa54e13a0957983e4ecf3ecc4c76a1461e9a6

  • SHA512

    4db4f7787d657a67954703db942238ed4f717949e8c088f5f57e75c8d5da87d71f881ce801902449a2e877339649368b6d5f220a8166c369329e11d9841d6be1

  • SSDEEP

    6144:Bcm4FmowdHoSYrsyhraHcpOFltH4tVj6RZgZOZ:L4wFHoSYg2eFp2j6zkOZ

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      cc90a1cb9b24eb005caabedab0c11450_NeikiAnalytics.exe

    • Size

      245KB

    • MD5

      cc90a1cb9b24eb005caabedab0c11450

    • SHA1

      3e4bd14268e0d861cab9d9c66ca29b5cea905ad2

    • SHA256

      8d1f51b8c32f599455a6b30dab4aa54e13a0957983e4ecf3ecc4c76a1461e9a6

    • SHA512

      4db4f7787d657a67954703db942238ed4f717949e8c088f5f57e75c8d5da87d71f881ce801902449a2e877339649368b6d5f220a8166c369329e11d9841d6be1

    • SSDEEP

      6144:Bcm4FmowdHoSYrsyhraHcpOFltH4tVj6RZgZOZ:L4wFHoSYg2eFp2j6zkOZ

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks