General

  • Target

    5a0e36d62601242ed4c5455bd218d8e0_NeikiAnalytics.exe

  • Size

    226KB

  • Sample

    240529-3aqw9adf6t

  • MD5

    5a0e36d62601242ed4c5455bd218d8e0

  • SHA1

    6559805e369004b729a70fd3ce8d4af58ad40b5e

  • SHA256

    d5988d7b64f233bf5a7001a9fdceb77797ab1ab282886a350500c7682f53958d

  • SHA512

    4491fcd65b5fa5d6f809e4c56be3c07ce88b3dc18c46ec6e81f305a53853609a27b2bb459ff433e4eb91268640d7b339b19b943b87eb159d68b94aaa3dd9cdec

  • SSDEEP

    6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzl+Sp:T4wFHoS3dJS4ZzeFaKHpCc5

Malware Config

Targets

    • Target

      5a0e36d62601242ed4c5455bd218d8e0_NeikiAnalytics.exe

    • Size

      226KB

    • MD5

      5a0e36d62601242ed4c5455bd218d8e0

    • SHA1

      6559805e369004b729a70fd3ce8d4af58ad40b5e

    • SHA256

      d5988d7b64f233bf5a7001a9fdceb77797ab1ab282886a350500c7682f53958d

    • SHA512

      4491fcd65b5fa5d6f809e4c56be3c07ce88b3dc18c46ec6e81f305a53853609a27b2bb459ff433e4eb91268640d7b339b19b943b87eb159d68b94aaa3dd9cdec

    • SSDEEP

      6144:Jcm4FmowdHoS3dGmS4Z1hraHcpOaKHpaztyzl+Sp:T4wFHoS3dJS4ZzeFaKHpCc5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks