General

  • Target

    a1f0efa185c5f223d34df35bc60b6a10_NeikiAnalytics.exe

  • Size

    214KB

  • Sample

    240530-j81pkabf51

  • MD5

    a1f0efa185c5f223d34df35bc60b6a10

  • SHA1

    b24c3d8dd45b153fd7726653975f989b11b6752e

  • SHA256

    1be5e69158390698eedfc934d2b958b4abe9fd7e2851cb19c31cbe98541b6c03

  • SHA512

    7e14df740ebb1f0fea6c1195e8e993032dc0bfb2fdb96d047ee80cbe9648068ab84517ece7c386a287b870e2d4b12c17ad82ef11831ec704e0386554f249c042

  • SSDEEP

    3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePa/:Zcm7ImGddXEu0ucju6/4kf724V

Malware Config

Targets

    • Target

      a1f0efa185c5f223d34df35bc60b6a10_NeikiAnalytics.exe

    • Size

      214KB

    • MD5

      a1f0efa185c5f223d34df35bc60b6a10

    • SHA1

      b24c3d8dd45b153fd7726653975f989b11b6752e

    • SHA256

      1be5e69158390698eedfc934d2b958b4abe9fd7e2851cb19c31cbe98541b6c03

    • SHA512

      7e14df740ebb1f0fea6c1195e8e993032dc0bfb2fdb96d047ee80cbe9648068ab84517ece7c386a287b870e2d4b12c17ad82ef11831ec704e0386554f249c042

    • SSDEEP

      3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24ePa/:Zcm7ImGddXEu0ucju6/4kf724V

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks