General

  • Target

    0ab26a64e9a488a8bd33caca9d7c9040_NeikiAnalytics.exe

  • Size

    294KB

  • Sample

    240527-w3f47aec62

  • MD5

    0ab26a64e9a488a8bd33caca9d7c9040

  • SHA1

    e0cc087af6c1f566c2871059a6f7fc8265369ac4

  • SHA256

    4d3f8c7958bd11e305f285fa57542c1df8674fdb574d6c385af3b33777812e29

  • SHA512

    332e71065f55386633546ef661fc6d24152316f656c772a2e1df5b999e7e07028f2f5a16552a6044b9c002c6521b997f5fa045c11f96567e3fdd25f4d5ba0396

  • SSDEEP

    6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOu:K4wFHoSQkuUHk1zBR/pMT9XvEhdfT

Malware Config

Targets

    • Target

      0ab26a64e9a488a8bd33caca9d7c9040_NeikiAnalytics.exe

    • Size

      294KB

    • MD5

      0ab26a64e9a488a8bd33caca9d7c9040

    • SHA1

      e0cc087af6c1f566c2871059a6f7fc8265369ac4

    • SHA256

      4d3f8c7958bd11e305f285fa57542c1df8674fdb574d6c385af3b33777812e29

    • SHA512

      332e71065f55386633546ef661fc6d24152316f656c772a2e1df5b999e7e07028f2f5a16552a6044b9c002c6521b997f5fa045c11f96567e3fdd25f4d5ba0396

    • SSDEEP

      6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOu:K4wFHoSQkuUHk1zBR/pMT9XvEhdfT

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks