General

  • Target

    5af39b8860096254917e19b17e7d3830_NeikiAnalytics.exe

  • Size

    484KB

  • Sample

    240529-3qhktafd36

  • MD5

    5af39b8860096254917e19b17e7d3830

  • SHA1

    d84b5e2727939de6465f67fd3a69f71d23b29d4f

  • SHA256

    cee32eb9ec22bb3b37970f6944d791f8f9e3a71d2cb2a43347d89467cbd3946b

  • SHA512

    12b374de3d169ee2e81dd79aec008a2dc05e7f5f20467eaefa0e2adc65cb016cb90279043fb8fe650c9ba328cf70cdea979e0a043f689332a6410678badbcb04

  • SSDEEP

    12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888nY:Cu49lmPh2kkkkK4kXkkkkkkkk+

Malware Config

Targets

    • Target

      5af39b8860096254917e19b17e7d3830_NeikiAnalytics.exe

    • Size

      484KB

    • MD5

      5af39b8860096254917e19b17e7d3830

    • SHA1

      d84b5e2727939de6465f67fd3a69f71d23b29d4f

    • SHA256

      cee32eb9ec22bb3b37970f6944d791f8f9e3a71d2cb2a43347d89467cbd3946b

    • SHA512

      12b374de3d169ee2e81dd79aec008a2dc05e7f5f20467eaefa0e2adc65cb016cb90279043fb8fe650c9ba328cf70cdea979e0a043f689332a6410678badbcb04

    • SSDEEP

      12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888nY:Cu49lmPh2kkkkK4kXkkkkkkkk+

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks