General

  • Target

    d8d1913f63aff3e6257e35534dc0dbc0_NeikiAnalytics.exe

  • Size

    440KB

  • Sample

    240520-jwddhaag73

  • MD5

    d8d1913f63aff3e6257e35534dc0dbc0

  • SHA1

    3c75605d2d7f8749b3be9010c8dcd6bb9eb5921a

  • SHA256

    8c5d3d2c2bd85a123991593128367d22bb8ff2348976492302dce8f3da56f273

  • SHA512

    2e131b4112143afe44b648e8ff5ee5351279966f350bf081cddf00d9d7ede340158be4eed97de17438cb5b081ac090d96beca461075bd63f5290b30bb5385abe

  • SSDEEP

    12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmHr:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMF

Malware Config

Targets

    • Target

      d8d1913f63aff3e6257e35534dc0dbc0_NeikiAnalytics.exe

    • Size

      440KB

    • MD5

      d8d1913f63aff3e6257e35534dc0dbc0

    • SHA1

      3c75605d2d7f8749b3be9010c8dcd6bb9eb5921a

    • SHA256

      8c5d3d2c2bd85a123991593128367d22bb8ff2348976492302dce8f3da56f273

    • SHA512

      2e131b4112143afe44b648e8ff5ee5351279966f350bf081cddf00d9d7ede340158be4eed97de17438cb5b081ac090d96beca461075bd63f5290b30bb5385abe

    • SSDEEP

      12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmHr:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks