General

  • Target

    fc0abb8d5f0ca4a79e5fdf3e244ae2f0_NeikiAnalytics.exe

  • Size

    338KB

  • Sample

    240527-salmeshc44

  • MD5

    fc0abb8d5f0ca4a79e5fdf3e244ae2f0

  • SHA1

    84d3cbe440fba5d67f7cf6c074126130fa6bf9a4

  • SHA256

    446a4c3e66060482bed2f056c181a68733451b8f6e5be908054d33f7e62ccf20

  • SHA512

    01b6cadfe4e55a1fd9dc24e98a6cdd5305df46f6a70dbdd8b72dfa6dae77759185f1b78b1b8fa9f214e2605efd69816f13e91853e6e9a0614fe712cf71d2c56b

  • SSDEEP

    6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnR:U4wFHoSK1zBjA892lY196AUo0LX2tZqD

Malware Config

Targets

    • Target

      fc0abb8d5f0ca4a79e5fdf3e244ae2f0_NeikiAnalytics.exe

    • Size

      338KB

    • MD5

      fc0abb8d5f0ca4a79e5fdf3e244ae2f0

    • SHA1

      84d3cbe440fba5d67f7cf6c074126130fa6bf9a4

    • SHA256

      446a4c3e66060482bed2f056c181a68733451b8f6e5be908054d33f7e62ccf20

    • SHA512

      01b6cadfe4e55a1fd9dc24e98a6cdd5305df46f6a70dbdd8b72dfa6dae77759185f1b78b1b8fa9f214e2605efd69816f13e91853e6e9a0614fe712cf71d2c56b

    • SSDEEP

      6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnR:U4wFHoSK1zBjA892lY196AUo0LX2tZqD

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks