General

  • Target

    9a2c312f4a92b79aed4cca358f109810_NeikiAnalytics.exe

  • Size

    190KB

  • Sample

    240530-ne474sgc82

  • MD5

    9a2c312f4a92b79aed4cca358f109810

  • SHA1

    0c72fb56ac6d2e9651ccb41d777046d0156dcd74

  • SHA256

    60fb75e874561c0705a0797c9b6876bc5cbc22f27bb4b2114c8bc64e7d2257f1

  • SHA512

    b4af2257fe3f8d7d94f0a725aed1ad862709c8b5c0b11db0ea3f450e4cd61ad4fc123a745c838bc99110c7f465afd75dc0063332438f57675e7bc338dc64cfac

  • SSDEEP

    3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+/:Ycm4FmowdHoSLEaTBftapTsyFeO/

Malware Config

Targets

    • Target

      9a2c312f4a92b79aed4cca358f109810_NeikiAnalytics.exe

    • Size

      190KB

    • MD5

      9a2c312f4a92b79aed4cca358f109810

    • SHA1

      0c72fb56ac6d2e9651ccb41d777046d0156dcd74

    • SHA256

      60fb75e874561c0705a0797c9b6876bc5cbc22f27bb4b2114c8bc64e7d2257f1

    • SHA512

      b4af2257fe3f8d7d94f0a725aed1ad862709c8b5c0b11db0ea3f450e4cd61ad4fc123a745c838bc99110c7f465afd75dc0063332438f57675e7bc338dc64cfac

    • SSDEEP

      3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+/:Ycm4FmowdHoSLEaTBftapTsyFeO/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks