Overview

overview

10

Static

static

10

2fa6fa1228...cs.exe

windows7-x64

10

2fa6fa1228...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fa6fa1228e96b55b3ad77a8c627b850_NeikiAnalytics.exe

  • Size

    487KB

  • Sample

    240604-flnvpsdg9z

  • MD5

    2fa6fa1228e96b55b3ad77a8c627b850

  • SHA1

    08a12fcd0d22ba7f243d387029d64f1ef06b3c23

  • SHA256

    ae81795b2be121ba562b640838cd646bc366d21410a73c662163a261c97dcd6d

  • SHA512

    dbd23abf81e652a75972faa628745632ade5821a59eba7a71f9af1ba204651b01c292812d18c814888225b2476cb0683f4869d2323de8db91161a162ba6c2f8b

  • SSDEEP

    6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF23yL:I7TcfNWj168w1VjsyvhNFF2iL

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojanupx

Malware Config

Targets

    • Target

      2fa6fa1228e96b55b3ad77a8c627b850_NeikiAnalytics.exe

    • Size

      487KB

    • MD5

      2fa6fa1228e96b55b3ad77a8c627b850

    • SHA1

      08a12fcd0d22ba7f243d387029d64f1ef06b3c23

    • SHA256

      ae81795b2be121ba562b640838cd646bc366d21410a73c662163a261c97dcd6d

    • SHA512

      dbd23abf81e652a75972faa628745632ade5821a59eba7a71f9af1ba204651b01c292812d18c814888225b2476cb0683f4869d2323de8db91161a162ba6c2f8b

    • SSDEEP

      6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF23yL:I7TcfNWj168w1VjsyvhNFF2iL

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks