General

  • Target

    688c1243389518e9002a2b4492434090_NeikiAnalytics.exe

  • Size

    214KB

  • Sample

    240526-fbgnmsfc8s

  • MD5

    688c1243389518e9002a2b4492434090

  • SHA1

    6d5395f40b431e92e66f0890783f8042faed83da

  • SHA256

    88befce4b02e78ce28cbebde3315fdfb072836401b76dcd326df1b74c0979311

  • SHA512

    6bbfeeb8d9ed62b4593a94509ffc11150089498f380c88e99afbdf9550139592e4bdcacd617630cbbd12ea42f61cc52d41db440eaab7feb0efdf87badb991cf6

  • SSDEEP

    3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePz:Zcm7ImGddXEu0ucju6/4kf724I

Malware Config

Targets

    • Target

      688c1243389518e9002a2b4492434090_NeikiAnalytics.exe

    • Size

      214KB

    • MD5

      688c1243389518e9002a2b4492434090

    • SHA1

      6d5395f40b431e92e66f0890783f8042faed83da

    • SHA256

      88befce4b02e78ce28cbebde3315fdfb072836401b76dcd326df1b74c0979311

    • SHA512

      6bbfeeb8d9ed62b4593a94509ffc11150089498f380c88e99afbdf9550139592e4bdcacd617630cbbd12ea42f61cc52d41db440eaab7feb0efdf87badb991cf6

    • SSDEEP

      3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePz:Zcm7ImGddXEu0ucju6/4kf724I

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks