General

  • Target

    d406c0f45f7623b706c8150342941700_NeikiAnalytics.exe

  • Size

    214KB

  • Sample

    240519-rk585sbc88

  • MD5

    d406c0f45f7623b706c8150342941700

  • SHA1

    c10276044e0a0a5f3f7a220f266a45185f988f7d

  • SHA256

    d8a3a6f121968815cf9095c0345c76b06940d35b983431881253a4e013295fed

  • SHA512

    11fa00d1abdbf5f9920c6bc6459563f2b8cf038917c44c753f35545c63ca151b3f586e1ea128b373367e48e6e7585035547f5f8e978ecc6bbb48b18aa7131d98

  • SSDEEP

    3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePay:Zcm7ImGddXEu0ucju6/4kf724s

Malware Config

Targets

    • Target

      d406c0f45f7623b706c8150342941700_NeikiAnalytics.exe

    • Size

      214KB

    • MD5

      d406c0f45f7623b706c8150342941700

    • SHA1

      c10276044e0a0a5f3f7a220f266a45185f988f7d

    • SHA256

      d8a3a6f121968815cf9095c0345c76b06940d35b983431881253a4e013295fed

    • SHA512

      11fa00d1abdbf5f9920c6bc6459563f2b8cf038917c44c753f35545c63ca151b3f586e1ea128b373367e48e6e7585035547f5f8e978ecc6bbb48b18aa7131d98

    • SSDEEP

      3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePay:Zcm7ImGddXEu0ucju6/4kf724s

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks