Overview

overview

10

Static

static

10

1239f186c3...cs.exe

windows7-x64

10

1239f186c3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1239f186c38b31a8a149c378ad5d9210_NeikiAnalytics.exe

  • Size

    398KB

  • Sample

    240519-wwc4ysba25

  • MD5

    1239f186c38b31a8a149c378ad5d9210

  • SHA1

    ffbd9a9860cd9f9df4ffbcbf43e29d2336967f8f

  • SHA256

    dc6353745cd10375095e5682eed502ec4b25f18239df149b0dfc4e59a903388f

  • SHA512

    0bb3b6ed17a25a070c81863844f00bc5ad93d3671c401199432c7f11320cc9f3ee67c1ef3d20d311d8564c47d5d7089e0fb1e6b5fb310e98417b057ad9aaba2f

  • SSDEEP

    12288:Q4wFHoSqRyddW7xJCc5TugZKS9sUvkclI0/RTk:BRyLWFMu91RlI0/RTk

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      1239f186c38b31a8a149c378ad5d9210_NeikiAnalytics.exe

    • Size

      398KB

    • MD5

      1239f186c38b31a8a149c378ad5d9210

    • SHA1

      ffbd9a9860cd9f9df4ffbcbf43e29d2336967f8f

    • SHA256

      dc6353745cd10375095e5682eed502ec4b25f18239df149b0dfc4e59a903388f

    • SHA512

      0bb3b6ed17a25a070c81863844f00bc5ad93d3671c401199432c7f11320cc9f3ee67c1ef3d20d311d8564c47d5d7089e0fb1e6b5fb310e98417b057ad9aaba2f

    • SSDEEP

      12288:Q4wFHoSqRyddW7xJCc5TugZKS9sUvkclI0/RTk:BRyLWFMu91RlI0/RTk

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks