General

  • Target

    0f4515cf3ade269e6ad0d81a0ee990f0_NeikiAnalytics.exe

  • Size

    173KB

  • Sample

    240527-q44c8aee8z

  • MD5

    0f4515cf3ade269e6ad0d81a0ee990f0

  • SHA1

    5d8135c2abe989f50ee4cf2f706842a52f5886f3

  • SHA256

    aae802b6232494f8ace0bb982dfc16844fd4cf1c414f9e4a28751e8b87dc4b54

  • SHA512

    95a125c9eb3f7c279afc7b648282073103e7062461a9869611a57837aa401af7fc1b8199768d6f277484eed938dcef2ae644cd5621024baa215872ce53fe4def

  • SSDEEP

    3072:ehOmTsF93UYfwC6GIout1sWRkVap3daVszyKd+XqQz0esujClt+zZ4dMovmW1q7M:ecm4FmowdHoSKWqoFdAszBd+aQz0IClL

Malware Config

Targets

    • Target

      0f4515cf3ade269e6ad0d81a0ee990f0_NeikiAnalytics.exe

    • Size

      173KB

    • MD5

      0f4515cf3ade269e6ad0d81a0ee990f0

    • SHA1

      5d8135c2abe989f50ee4cf2f706842a52f5886f3

    • SHA256

      aae802b6232494f8ace0bb982dfc16844fd4cf1c414f9e4a28751e8b87dc4b54

    • SHA512

      95a125c9eb3f7c279afc7b648282073103e7062461a9869611a57837aa401af7fc1b8199768d6f277484eed938dcef2ae644cd5621024baa215872ce53fe4def

    • SSDEEP

      3072:ehOmTsF93UYfwC6GIout1sWRkVap3daVszyKd+XqQz0esujClt+zZ4dMovmW1q7M:ecm4FmowdHoSKWqoFdAszBd+aQz0IClL

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks