General

  • Target

    1b0d9c6ed23852de54ff9e18db778470_NeikiAnalytics.exe

  • Size

    329KB

  • Sample

    240519-xjnklacf8z

  • MD5

    1b0d9c6ed23852de54ff9e18db778470

  • SHA1

    b444e900fc5ab31a71564519bc3f00e84ebd9e9a

  • SHA256

    9b256baffab58b009b05489e753e2c8aa8141411113c75d87fdc956a2070d87c

  • SHA512

    ccd49b0566ed5ced043affcdbd8477883138406af7c7fc37dc0aae7be8e7a08a6c7f22211cbe00a6f3d65d6f400a4e374bca0716d8198256b191dc247413a337

  • SSDEEP

    6144:3cm7ImGddXsJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tPhh:F7Tc8JdSjylh2b77BoTMA9gX59sTsuTR

Malware Config

Targets

    • Target

      1b0d9c6ed23852de54ff9e18db778470_NeikiAnalytics.exe

    • Size

      329KB

    • MD5

      1b0d9c6ed23852de54ff9e18db778470

    • SHA1

      b444e900fc5ab31a71564519bc3f00e84ebd9e9a

    • SHA256

      9b256baffab58b009b05489e753e2c8aa8141411113c75d87fdc956a2070d87c

    • SHA512

      ccd49b0566ed5ced043affcdbd8477883138406af7c7fc37dc0aae7be8e7a08a6c7f22211cbe00a6f3d65d6f400a4e374bca0716d8198256b191dc247413a337

    • SSDEEP

      6144:3cm7ImGddXsJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tPhh:F7Tc8JdSjylh2b77BoTMA9gX59sTsuTR

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks