Overview

overview

10

Static

static

10

430f4a2033...cs.exe

windows7-x64

10

430f4a2033...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    430f4a2033b39973a4a2fab2717fe1e0_NeikiAnalytics.exe

  • Size

    487KB

  • Sample

    240528-pastysca2t

  • MD5

    430f4a2033b39973a4a2fab2717fe1e0

  • SHA1

    8f7ee530ef281051177cc01ec6771bc7dc259080

  • SHA256

    5b8009564cb608a6d5a9952b7cdb7666f2f3ebc73dde0f4c5824c865880b7755

  • SHA512

    3f4cdf1829b5e2c8d472b2f515d3165e6194e98b18d86068f386c71429065be80dbbb2ec707e8ad09bfd0b43b2faae46eaae3494b07e96abec6a8398599d0f62

  • SSDEEP

    6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF23ye:I7TcfNWj168w1VjsyvhNFF2ie

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      430f4a2033b39973a4a2fab2717fe1e0_NeikiAnalytics.exe

    • Size

      487KB

    • MD5

      430f4a2033b39973a4a2fab2717fe1e0

    • SHA1

      8f7ee530ef281051177cc01ec6771bc7dc259080

    • SHA256

      5b8009564cb608a6d5a9952b7cdb7666f2f3ebc73dde0f4c5824c865880b7755

    • SHA512

      3f4cdf1829b5e2c8d472b2f515d3165e6194e98b18d86068f386c71429065be80dbbb2ec707e8ad09bfd0b43b2faae46eaae3494b07e96abec6a8398599d0f62

    • SSDEEP

      6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF23ye:I7TcfNWj168w1VjsyvhNFF2ie

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks