General

  • Target

    3e94faae7200ee9b1aee15373fda26c0_NeikiAnalytics.exe

  • Size

    440KB

  • Sample

    240601-m7ex9aaf8w

  • MD5

    3e94faae7200ee9b1aee15373fda26c0

  • SHA1

    24b6dec0349322e1342345fd687480b8cdc0a686

  • SHA256

    5ffd3f77947cb97631891cfd1e29dc6e0ccfbde397b7eb307fbd04d53447d0b8

  • SHA512

    275eb3b278a88da1d46855f9ee823986018917ae4bbe3416e708e71ed289d23f12873ba25d5491db1ac20f4b8c954d4fbc95dd9a06dfc0da07c7a779be66ef97

  • SSDEEP

    12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmHM:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMa

Malware Config

Targets

    • Target

      3e94faae7200ee9b1aee15373fda26c0_NeikiAnalytics.exe

    • Size

      440KB

    • MD5

      3e94faae7200ee9b1aee15373fda26c0

    • SHA1

      24b6dec0349322e1342345fd687480b8cdc0a686

    • SHA256

      5ffd3f77947cb97631891cfd1e29dc6e0ccfbde397b7eb307fbd04d53447d0b8

    • SHA512

      275eb3b278a88da1d46855f9ee823986018917ae4bbe3416e708e71ed289d23f12873ba25d5491db1ac20f4b8c954d4fbc95dd9a06dfc0da07c7a779be66ef97

    • SSDEEP

      12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmHM:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMa

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks