General

  • Target

    3b89fa2cd7351407a954e69a19f0e590_NeikiAnalytics.exe

  • Size

    191KB

  • Sample

    240526-actfyafd6s

  • MD5

    3b89fa2cd7351407a954e69a19f0e590

  • SHA1

    47916d3dede84acbe382a976910220f6fbced990

  • SHA256

    1a7e5ef9f066e9e4ea3fdbec8860ce46acd7177776449d40444fec881503c678

  • SHA512

    7c3f9ac4f98fab9b9cbb1df359879425c58693200f4636ba4897db554ec5c3cfffd73847733fdbb51e0746698a232bcc4775d963f316bfeeedd81bfc86f67482

  • SSDEEP

    3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSaX:Fcm4FmowdHoS8fMoSVAHubPtyYxfPX

Malware Config

Targets

    • Target

      3b89fa2cd7351407a954e69a19f0e590_NeikiAnalytics.exe

    • Size

      191KB

    • MD5

      3b89fa2cd7351407a954e69a19f0e590

    • SHA1

      47916d3dede84acbe382a976910220f6fbced990

    • SHA256

      1a7e5ef9f066e9e4ea3fdbec8860ce46acd7177776449d40444fec881503c678

    • SHA512

      7c3f9ac4f98fab9b9cbb1df359879425c58693200f4636ba4897db554ec5c3cfffd73847733fdbb51e0746698a232bcc4775d963f316bfeeedd81bfc86f67482

    • SSDEEP

      3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSaX:Fcm4FmowdHoS8fMoSVAHubPtyYxfPX

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks