Overview

overview

10

Static

static

10

026c5e6f06...cs.exe

windows7-x64

10

026c5e6f06...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    026c5e6f0683035be42b5923f1e4be60_NeikiAnalytics.exe

  • Size

    226KB

  • Sample

    240527-vwky5abd6t

  • MD5

    026c5e6f0683035be42b5923f1e4be60

  • SHA1

    75a18599ef998c02bb9356cedfb9fcfd058bfacb

  • SHA256

    7842f3d53f3dacafc3dd61faa5cb477dd922475c8d94dddbd70f8067e9205fac

  • SHA512

    dca0cad0378c5b9adb39a260aa17af6c4aa485b671df864405754366df3f910224f235dba97d5328d820efd846263dee9696f1ae63fb5da421e654c142aface6

  • SSDEEP

    6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzl+Sl:T4wFHoS3dJS4ZzeFaKHpCcV

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      026c5e6f0683035be42b5923f1e4be60_NeikiAnalytics.exe

    • Size

      226KB

    • MD5

      026c5e6f0683035be42b5923f1e4be60

    • SHA1

      75a18599ef998c02bb9356cedfb9fcfd058bfacb

    • SHA256

      7842f3d53f3dacafc3dd61faa5cb477dd922475c8d94dddbd70f8067e9205fac

    • SHA512

      dca0cad0378c5b9adb39a260aa17af6c4aa485b671df864405754366df3f910224f235dba97d5328d820efd846263dee9696f1ae63fb5da421e654c142aface6

    • SSDEEP

      6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzl+Sl:T4wFHoS3dJS4ZzeFaKHpCcV

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks