General

  • Target

    24184fbe84a49c31bca442e24e193730_NeikiAnalytics.exe

  • Size

    441KB

  • Sample

    240527-2v7j3ada7s

  • MD5

    24184fbe84a49c31bca442e24e193730

  • SHA1

    d46cdeca238bebf93288f12de2c036a3ed80984d

  • SHA256

    348db13714932ecffda8039d11264d7c0ac29d2c25db1500355509e55605229c

  • SHA512

    209f25facff9842fa62041e98332416a43013f22c709e470b82d38b7eef1f7269a8072a05a5e93afc1f4accc4856229e7b03a0b0964b1a97edbee3ae62bee00a

  • SSDEEP

    12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmH0:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMa

Malware Config

Targets

    • Target

      24184fbe84a49c31bca442e24e193730_NeikiAnalytics.exe

    • Size

      441KB

    • MD5

      24184fbe84a49c31bca442e24e193730

    • SHA1

      d46cdeca238bebf93288f12de2c036a3ed80984d

    • SHA256

      348db13714932ecffda8039d11264d7c0ac29d2c25db1500355509e55605229c

    • SHA512

      209f25facff9842fa62041e98332416a43013f22c709e470b82d38b7eef1f7269a8072a05a5e93afc1f4accc4856229e7b03a0b0964b1a97edbee3ae62bee00a

    • SSDEEP

      12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmH0:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMa

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks