General

  • Target

    355183e09c8f7dae85ac949315f574f0_NeikiAnalytics.exe

  • Size

    350KB

  • Sample

    240519-zj1w2ahb8t

  • MD5

    355183e09c8f7dae85ac949315f574f0

  • SHA1

    529c025b7c7ee7c33944ef8685ed35e495d26796

  • SHA256

    a87efeec9022ef50139cbc9d2909f297d0f9038ca3dd9544c3009585e0a9edd4

  • SHA512

    6a0204e49a44f70c330e8a397056c3708c13ce3afed13712e57dc06d3b60027716632c7396880201cc401b873e58e3d2081a84e67e5e5f59e1e5223fcc33aa93

  • SSDEEP

    6144:4cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4TrHb:+7TcBuGy/Sa+/sie0OpncKe/KFBOfmzD

Malware Config

Targets

    • Target

      355183e09c8f7dae85ac949315f574f0_NeikiAnalytics.exe

    • Size

      350KB

    • MD5

      355183e09c8f7dae85ac949315f574f0

    • SHA1

      529c025b7c7ee7c33944ef8685ed35e495d26796

    • SHA256

      a87efeec9022ef50139cbc9d2909f297d0f9038ca3dd9544c3009585e0a9edd4

    • SHA512

      6a0204e49a44f70c330e8a397056c3708c13ce3afed13712e57dc06d3b60027716632c7396880201cc401b873e58e3d2081a84e67e5e5f59e1e5223fcc33aa93

    • SSDEEP

      6144:4cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4TrHb:+7TcBuGy/Sa+/sie0OpncKe/KFBOfmzD

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks