General

  • Target

    46504a4858501ee927f12bfe18c203c0_NeikiAnalytics.exe

  • Size

    192KB

  • Sample

    240528-qw72fagg22

  • MD5

    46504a4858501ee927f12bfe18c203c0

  • SHA1

    51503b70a345f3acecc7ecf932d267b43ebc5ed0

  • SHA256

    f953e6765ad7f9418587f3a0afe8c452827ff7839916dff17ffafd6c22b67b6e

  • SHA512

    57cccca415734d3351cf86364d17f3c18385a8debb7c9cac1fe593eb428edcd4be390b4ea1ffba1ba86845135a60b83eadefb217f96fabfd447eaa920bf91ddd

  • SSDEEP

    3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSa0:Fcm4FmowdHoS8fMoSVAHubPtyYxfP0

Malware Config

Targets

    • Target

      46504a4858501ee927f12bfe18c203c0_NeikiAnalytics.exe

    • Size

      192KB

    • MD5

      46504a4858501ee927f12bfe18c203c0

    • SHA1

      51503b70a345f3acecc7ecf932d267b43ebc5ed0

    • SHA256

      f953e6765ad7f9418587f3a0afe8c452827ff7839916dff17ffafd6c22b67b6e

    • SHA512

      57cccca415734d3351cf86364d17f3c18385a8debb7c9cac1fe593eb428edcd4be390b4ea1ffba1ba86845135a60b83eadefb217f96fabfd447eaa920bf91ddd

    • SSDEEP

      3072:FhOmTsF93UYfwC6GIoutrVCfMoh52waAyiJ8mqtbfUVKty16hDsI/tSa0:Fcm4FmowdHoS8fMoSVAHubPtyYxfP0

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks