General

  • Target

    17958f252c9338415228f912a9c0a450_NeikiAnalytics.exe

  • Size

    294KB

  • Sample

    240530-msswkaee6w

  • MD5

    17958f252c9338415228f912a9c0a450

  • SHA1

    f5825500d10aa2452ebd5018c76b7a261c3a0afa

  • SHA256

    d566b9730bb5d40e9c18c003f170d5d1a7e5a4222a56ef334713af83b705eacc

  • SHA512

    71228b372ccd6655ad5cb868660ebfeed2332c564110c1182707aefe2421a703f70554a69ec7bb2a2273904a15f6afd0391f68bc14f0397f6dec79b80f0a6d85

  • SSDEEP

    6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOV:K4wFHoSQkuUHk1zBR/pMT9XvEhdfU

Malware Config

Targets

    • Target

      17958f252c9338415228f912a9c0a450_NeikiAnalytics.exe

    • Size

      294KB

    • MD5

      17958f252c9338415228f912a9c0a450

    • SHA1

      f5825500d10aa2452ebd5018c76b7a261c3a0afa

    • SHA256

      d566b9730bb5d40e9c18c003f170d5d1a7e5a4222a56ef334713af83b705eacc

    • SHA512

      71228b372ccd6655ad5cb868660ebfeed2332c564110c1182707aefe2421a703f70554a69ec7bb2a2273904a15f6afd0391f68bc14f0397f6dec79b80f0a6d85

    • SSDEEP

      6144:ccm4FmowdHoSQkuObHq9ltAszBd+za/p1slTjZXvEQo9dftOV:K4wFHoSQkuUHk1zBR/pMT9XvEhdfU

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks