Overview

overview

10

Static

static

10

f283068a04...cs.exe

windows7-x64

10

f283068a04...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f283068a04b298b744d75b833d08fe90_NeikiAnalytics.exe

  • Size

    456KB

  • Sample

    240520-nd61baha76

  • MD5

    f283068a04b298b744d75b833d08fe90

  • SHA1

    b5db3416cbe75cbcb97c05b66f80233a7c0f14d4

  • SHA256

    386492e395bf4ad04b7d692694992cc22e1ca28d2ab869a7ebbf2d037252ac72

  • SHA512

    c17ccc46fc2860c90c0aed33722efd602728151f80c33c77f08229b7b3a848315ab14ef135159952835e1e05f29ff2ab00e6ff6fa8cfd506963e76f047728a6e

  • SSDEEP

    12288:04wFHoSyd0V3eFp3IDvSbh5nPYERM8mXzplo4Ms:rd0gFp3lz1/uzploU

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      f283068a04b298b744d75b833d08fe90_NeikiAnalytics.exe

    • Size

      456KB

    • MD5

      f283068a04b298b744d75b833d08fe90

    • SHA1

      b5db3416cbe75cbcb97c05b66f80233a7c0f14d4

    • SHA256

      386492e395bf4ad04b7d692694992cc22e1ca28d2ab869a7ebbf2d037252ac72

    • SHA512

      c17ccc46fc2860c90c0aed33722efd602728151f80c33c77f08229b7b3a848315ab14ef135159952835e1e05f29ff2ab00e6ff6fa8cfd506963e76f047728a6e

    • SSDEEP

      12288:04wFHoSyd0V3eFp3IDvSbh5nPYERM8mXzplo4Ms:rd0gFp3lz1/uzploU

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks