General

  • Target

    1ae466e8564aee7c6498f1e6e533dde0_NeikiAnalytics.exe

  • Size

    441KB

  • Sample

    240522-epxrcabg7y

  • MD5

    1ae466e8564aee7c6498f1e6e533dde0

  • SHA1

    7923159b58bce1aaf5af11afebac476d5dab7c20

  • SHA256

    03df51a6b1bf2723485e07381b545b7fdbad8e850e923e72c3efcd37386b68ba

  • SHA512

    d375f1180a74ee25ca03884252b477df5cc0980a28cb6064789d771e1d3f6a67619858040b201d82bae83a97b087e156686994b1d1a48718bc014a6746bfaf18

  • SSDEEP

    12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmH7:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMx

Malware Config

Targets

    • Target

      1ae466e8564aee7c6498f1e6e533dde0_NeikiAnalytics.exe

    • Size

      441KB

    • MD5

      1ae466e8564aee7c6498f1e6e533dde0

    • SHA1

      7923159b58bce1aaf5af11afebac476d5dab7c20

    • SHA256

      03df51a6b1bf2723485e07381b545b7fdbad8e850e923e72c3efcd37386b68ba

    • SHA512

      d375f1180a74ee25ca03884252b477df5cc0980a28cb6064789d771e1d3f6a67619858040b201d82bae83a97b087e156686994b1d1a48718bc014a6746bfaf18

    • SSDEEP

      12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmH7:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks