General

  • Target

    37553cd5bd6107bf33b294c859d04bf0_NeikiAnalytics.exe

  • Size

    484KB

  • Sample

    240605-eqx4haee98

  • MD5

    37553cd5bd6107bf33b294c859d04bf0

  • SHA1

    b03e5709d344052c8696a3417a761c2dc349e749

  • SHA256

    2ebb86bb941631d5f0ca2bb6f6be97b1075daf14ce111c80843060027c6579e9

  • SHA512

    eab318b13d2b8144edb7dcf027b602edaf1af2453611db28a2f1c02896890b3da8adad27e3de9ab833600939663d36fd0206e4908488e39457bcb8f1bf0e6745

  • SSDEEP

    12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888nA:Cu49lmPh2kkkkK4kXkkkkkkkkW

Malware Config

Targets

    • Target

      37553cd5bd6107bf33b294c859d04bf0_NeikiAnalytics.exe

    • Size

      484KB

    • MD5

      37553cd5bd6107bf33b294c859d04bf0

    • SHA1

      b03e5709d344052c8696a3417a761c2dc349e749

    • SHA256

      2ebb86bb941631d5f0ca2bb6f6be97b1075daf14ce111c80843060027c6579e9

    • SHA512

      eab318b13d2b8144edb7dcf027b602edaf1af2453611db28a2f1c02896890b3da8adad27e3de9ab833600939663d36fd0206e4908488e39457bcb8f1bf0e6745

    • SSDEEP

      12288:N4wFHoSMu49P9mPh2kkkkK4kXkkkkkkkkl888888888888888888nA:Cu49lmPh2kkkkK4kXkkkkkkkkW

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks