General

  • Target

    55233345c4166d0d340d8070a494990945c8a3a40ecf3d9c4a21e74ea2c348e5_NeikiAnalytics

  • Size

    464KB

  • Sample

    240521-qph4qsfe61

  • MD5

    a5e048590ae0b3dadad860f2c26384f0

  • SHA1

    95173bf1fc5567a7c718e9dc4a50ba7ba2b7322e

  • SHA256

    55233345c4166d0d340d8070a494990945c8a3a40ecf3d9c4a21e74ea2c348e5

  • SHA512

    a22f0ba0bbf3e25603d178eb7c154987b510c9a42d79d1de14b744675f998e04e3dc305bc2f286a4cca511d5c541c74c3afe948540c6ed047e8ac1d7b340ce4a

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V/:VeR0oykayRFp3lztP+OKaf1V/

Malware Config

Targets

    • Target

      55233345c4166d0d340d8070a494990945c8a3a40ecf3d9c4a21e74ea2c348e5_NeikiAnalytics

    • Size

      464KB

    • MD5

      a5e048590ae0b3dadad860f2c26384f0

    • SHA1

      95173bf1fc5567a7c718e9dc4a50ba7ba2b7322e

    • SHA256

      55233345c4166d0d340d8070a494990945c8a3a40ecf3d9c4a21e74ea2c348e5

    • SHA512

      a22f0ba0bbf3e25603d178eb7c154987b510c9a42d79d1de14b744675f998e04e3dc305bc2f286a4cca511d5c541c74c3afe948540c6ed047e8ac1d7b340ce4a

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V/:VeR0oykayRFp3lztP+OKaf1V/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks