General

  • Target

    ec511f347154cb133e593d97378df5c0_NeikiAnalytics.exe

  • Size

    293KB

  • Sample

    240519-thfltaee61

  • MD5

    ec511f347154cb133e593d97378df5c0

  • SHA1

    b9441417724ade19af63ad743d4475c748c53092

  • SHA256

    6c9f60de57b33f6a03880231ed75955016a461be0de7e7940280d2b4895b8fcf

  • SHA512

    c6636244b3da30cf39b36c97bd41a27fd85a0e1b2113cb909e61ff841e4bd91ec4b735548c7239411032afadcf7a076eb8a046d3d53751fce872f29d7001148f

  • SSDEEP

    6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOw:K4wFHoSQkuUHk1zBR/pMT9XvEhdff

Malware Config

Targets

    • Target

      ec511f347154cb133e593d97378df5c0_NeikiAnalytics.exe

    • Size

      293KB

    • MD5

      ec511f347154cb133e593d97378df5c0

    • SHA1

      b9441417724ade19af63ad743d4475c748c53092

    • SHA256

      6c9f60de57b33f6a03880231ed75955016a461be0de7e7940280d2b4895b8fcf

    • SHA512

      c6636244b3da30cf39b36c97bd41a27fd85a0e1b2113cb909e61ff841e4bd91ec4b735548c7239411032afadcf7a076eb8a046d3d53751fce872f29d7001148f

    • SSDEEP

      6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOw:K4wFHoSQkuUHk1zBR/pMT9XvEhdff

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks