Overview

overview

10

Static

static

10

ea9b9df5f6...cs.exe

windows7-x64

10

ea9b9df5f6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea9b9df5f616376f02c3b6148a78e3f0_NeikiAnalytics.exe

  • Size

    190KB

  • Sample

    240520-mm6v8sff58

  • MD5

    ea9b9df5f616376f02c3b6148a78e3f0

  • SHA1

    63247bd5b3c31a4286cf301df410c8c6f525facc

  • SHA256

    3f49017d3bb2b22756e604f25fb70cf8200cc8137623cc90785af7208529c957

  • SHA512

    8ff2ce002d110ecc2314fbc290763ac296639386d0b86551db703e6446c6eddaf05e79f68b9a91be8455612a92b19d67c8c78228fb769b6f478793f4039dfa42

  • SSDEEP

    3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+q:Ycm4FmowdHoSLEaTBftapTsyFeOq

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojan

Malware Config

Targets

    • Target

      ea9b9df5f616376f02c3b6148a78e3f0_NeikiAnalytics.exe

    • Size

      190KB

    • MD5

      ea9b9df5f616376f02c3b6148a78e3f0

    • SHA1

      63247bd5b3c31a4286cf301df410c8c6f525facc

    • SHA256

      3f49017d3bb2b22756e604f25fb70cf8200cc8137623cc90785af7208529c957

    • SHA512

      8ff2ce002d110ecc2314fbc290763ac296639386d0b86551db703e6446c6eddaf05e79f68b9a91be8455612a92b19d67c8c78228fb769b6f478793f4039dfa42

    • SSDEEP

      3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+q:Ycm4FmowdHoSLEaTBftapTsyFeOq

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks