General

  • Target

    a881ad63ac1ff75962efc36765437570_NeikiAnalytics.exe

  • Size

    247KB

  • Sample

    240530-mv3tjsef4z

  • MD5

    a881ad63ac1ff75962efc36765437570

  • SHA1

    9732b6b031d213325ce5a591ff435ccce26dd520

  • SHA256

    cf2ca8a25da39a63ac87b6869b020ef16d20cd0bc56887facb2969520dd7dd9c

  • SHA512

    ecc35d556248c4ba11bce1a3911f1bd29b77533dac4bb6d355d6b84b476ce283edc367bb5ccb2973b1f5908d207b5f3d12d48ec9840fcf751b1b1f49ddc0d62b

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+H:ccm4FmowdHoSi9EIBftapTs4WZazI

Malware Config

Targets

    • Target

      a881ad63ac1ff75962efc36765437570_NeikiAnalytics.exe

    • Size

      247KB

    • MD5

      a881ad63ac1ff75962efc36765437570

    • SHA1

      9732b6b031d213325ce5a591ff435ccce26dd520

    • SHA256

      cf2ca8a25da39a63ac87b6869b020ef16d20cd0bc56887facb2969520dd7dd9c

    • SHA512

      ecc35d556248c4ba11bce1a3911f1bd29b77533dac4bb6d355d6b84b476ce283edc367bb5ccb2973b1f5908d207b5f3d12d48ec9840fcf751b1b1f49ddc0d62b

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+H:ccm4FmowdHoSi9EIBftapTs4WZazI

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks