General

  • Target

    f4d04404ded651cda9dcc5ba42a1d150_NeikiAnalytics.exe

  • Size

    253KB

  • Sample

    240529-x989zsfc4y

  • MD5

    f4d04404ded651cda9dcc5ba42a1d150

  • SHA1

    e509b5aec318a2d0b8dc6aabcde5784ba44e315b

  • SHA256

    399dc491d2a951480ed0bac618c7922fc4430b162fc288000df974f71c9887b9

  • SHA512

    d051106ae534134524285a1b8842c9e2b90c3a199f2587b690dc7e1289463ccb0323954cab1a983789cdc091fe40d960c4690167db13c8c57ec29e776320d2bd

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THkm:ccm4FmowdHoSi9EIBftapTs4WZazeE1Y

Malware Config

Targets

    • Target

      f4d04404ded651cda9dcc5ba42a1d150_NeikiAnalytics.exe

    • Size

      253KB

    • MD5

      f4d04404ded651cda9dcc5ba42a1d150

    • SHA1

      e509b5aec318a2d0b8dc6aabcde5784ba44e315b

    • SHA256

      399dc491d2a951480ed0bac618c7922fc4430b162fc288000df974f71c9887b9

    • SHA512

      d051106ae534134524285a1b8842c9e2b90c3a199f2587b690dc7e1289463ccb0323954cab1a983789cdc091fe40d960c4690167db13c8c57ec29e776320d2bd

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+THkm:ccm4FmowdHoSi9EIBftapTs4WZazeE1Y

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks