General

  • Target

    e46b61ea911d0a867eb2c5b89d44fe40_NeikiAnalytics.exe

  • Size

    227KB

  • Sample

    240519-sybr5ada83

  • MD5

    e46b61ea911d0a867eb2c5b89d44fe40

  • SHA1

    969d95fe19843ff76566fa108d2e8fede45ffe5a

  • SHA256

    dc897fa28505101ba7147287e19ef5fa2c7eff62a0df7cb210275da81bd93bfa

  • SHA512

    1a78007f4e96ff718eb571b03883802e913f454099fa7f14fabbcbf21eedec9b9cd159975d0a33816619cb86cd626cacd3f91dc4fb8982ee113bc612ad55a3a0

  • SSDEEP

    6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzl+Sn:T4wFHoS3dJS4ZzeFaKHpCcX

Malware Config

Targets

    • Target

      e46b61ea911d0a867eb2c5b89d44fe40_NeikiAnalytics.exe

    • Size

      227KB

    • MD5

      e46b61ea911d0a867eb2c5b89d44fe40

    • SHA1

      969d95fe19843ff76566fa108d2e8fede45ffe5a

    • SHA256

      dc897fa28505101ba7147287e19ef5fa2c7eff62a0df7cb210275da81bd93bfa

    • SHA512

      1a78007f4e96ff718eb571b03883802e913f454099fa7f14fabbcbf21eedec9b9cd159975d0a33816619cb86cd626cacd3f91dc4fb8982ee113bc612ad55a3a0

    • SSDEEP

      6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzl+Sn:T4wFHoS3dJS4ZzeFaKHpCcX

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks