General

  • Target

    1a5b21e0e0271c3a1f63c5234395fcf0NeikiAnalytics.exe

  • Size

    192KB

  • Sample

    240527-ztgk5sba83

  • MD5

    1a5b21e0e0271c3a1f63c5234395fcf0

  • SHA1

    f37fbbacbf931f335f6bfbe5233546ee6bcae76a

  • SHA256

    3957371af7b8d003c018b1a7d71df6f2ad86175d0b363395a136e27465fe80f2

  • SHA512

    2313f84727884a7f7b06ac835c30d1d6c1835e55118ac5a8d4674b0cd753a20ac4be58f9b05bed4c85aebd772a7cf70b407b62009fa012fad2a5f63b8e843f37

  • SSDEEP

    3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSaF:Fcm4FmowdHoS8fMoSVAHubPtyYxfPF

Malware Config

Targets

    • Target

      1a5b21e0e0271c3a1f63c5234395fcf0NeikiAnalytics.exe

    • Size

      192KB

    • MD5

      1a5b21e0e0271c3a1f63c5234395fcf0

    • SHA1

      f37fbbacbf931f335f6bfbe5233546ee6bcae76a

    • SHA256

      3957371af7b8d003c018b1a7d71df6f2ad86175d0b363395a136e27465fe80f2

    • SHA512

      2313f84727884a7f7b06ac835c30d1d6c1835e55118ac5a8d4674b0cd753a20ac4be58f9b05bed4c85aebd772a7cf70b407b62009fa012fad2a5f63b8e843f37

    • SSDEEP

      3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSaF:Fcm4FmowdHoS8fMoSVAHubPtyYxfPF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks