General

  • Target

    123b2faf7617c0b2948f3411fd76f3c0_NeikiAnalytics.exe

  • Size

    253KB

  • Sample

    240527-ydal8agf87

  • MD5

    123b2faf7617c0b2948f3411fd76f3c0

  • SHA1

    12d6548df9e1f8c1275f307b64539502e5bd441e

  • SHA256

    12a46cc515f1bf20b42e14ccb04b6afa0a6f6deebb3fcc6c0fd5e46605238907

  • SHA512

    8880971ba0e3fcf7b9d976216ddf99d4c33af8be0ab1c9cb3dac65d0ec2b1e6fcddaaf79b06345258a3c15eb83fd0b6a265b1be19d7e9f46d3ea78abf49c741a

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THk1:ccm4FmowdHoSi9EIBftapTs4WZazeE1X

Malware Config

Targets

    • Target

      123b2faf7617c0b2948f3411fd76f3c0_NeikiAnalytics.exe

    • Size

      253KB

    • MD5

      123b2faf7617c0b2948f3411fd76f3c0

    • SHA1

      12d6548df9e1f8c1275f307b64539502e5bd441e

    • SHA256

      12a46cc515f1bf20b42e14ccb04b6afa0a6f6deebb3fcc6c0fd5e46605238907

    • SHA512

      8880971ba0e3fcf7b9d976216ddf99d4c33af8be0ab1c9cb3dac65d0ec2b1e6fcddaaf79b06345258a3c15eb83fd0b6a265b1be19d7e9f46d3ea78abf49c741a

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THk1:ccm4FmowdHoSi9EIBftapTs4WZazeE1X

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks