General

  • Target

    af689e9ade44e44317421df36090f9f0_NeikiAnalytics.exe

  • Size

    251KB

  • Sample

    240524-frg94see53

  • MD5

    af689e9ade44e44317421df36090f9f0

  • SHA1

    042433e50d04eb277f8c0796e216b100c5284bc6

  • SHA256

    d80382a7ff9e24e217528ebb64e5633bfdfa8a9bd9ac823e1b8e075c1536d81f

  • SHA512

    25e6a434061f0688f6f5cba6816e197041725470276224fb23f9d79e01502ce4b9ba62b6d3f8611569d2a63607e6628ad72a1af3b761179aa2b4fe8ed67c7b32

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+g:ccm4FmowdHoSi9EIBftapTs4WZazb

Malware Config

Targets

    • Target

      af689e9ade44e44317421df36090f9f0_NeikiAnalytics.exe

    • Size

      251KB

    • MD5

      af689e9ade44e44317421df36090f9f0

    • SHA1

      042433e50d04eb277f8c0796e216b100c5284bc6

    • SHA256

      d80382a7ff9e24e217528ebb64e5633bfdfa8a9bd9ac823e1b8e075c1536d81f

    • SHA512

      25e6a434061f0688f6f5cba6816e197041725470276224fb23f9d79e01502ce4b9ba62b6d3f8611569d2a63607e6628ad72a1af3b761179aa2b4fe8ed67c7b32

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+g:ccm4FmowdHoSi9EIBftapTs4WZazb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks