Overview

overview

10

Static

static

10

4af8c1d0f2...cs.exe

windows7-x64

10

4af8c1d0f2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4af8c1d0f2b8f768e83295104e18bd30_NeikiAnalytics.exe

  • Size

    190KB

  • Sample

    240605-j5vddabd46

  • MD5

    4af8c1d0f2b8f768e83295104e18bd30

  • SHA1

    a68a3c55f49efa66834e67da5b57ca2b08890d24

  • SHA256

    19269998dc620b5d4b7e33c3be75464240bbb8f8db4fd652d79e4d3d4f4c9861

  • SHA512

    43a5c4afec54e61c7ec42876cff0aed3f26dc5fc5759d3caf40050efa24e0a61fe68eb4cefba1a824f89145b244a2d3fb70c52709d8aff52533c295601a1ec7c

  • SSDEEP

    3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+Ly:Ycm4FmowdHoSLEaTBftapTsyFeOu

Score
10/10
berbewblackmoonbackdoorbankerdroppertrojan

Malware Config

Targets

    • Target

      4af8c1d0f2b8f768e83295104e18bd30_NeikiAnalytics.exe

    • Size

      190KB

    • MD5

      4af8c1d0f2b8f768e83295104e18bd30

    • SHA1

      a68a3c55f49efa66834e67da5b57ca2b08890d24

    • SHA256

      19269998dc620b5d4b7e33c3be75464240bbb8f8db4fd652d79e4d3d4f4c9861

    • SHA512

      43a5c4afec54e61c7ec42876cff0aed3f26dc5fc5759d3caf40050efa24e0a61fe68eb4cefba1a824f89145b244a2d3fb70c52709d8aff52533c295601a1ec7c

    • SSDEEP

      3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+Ly:Ycm4FmowdHoSLEaTBftapTsyFeOu

    Score
    10/10
    blackmoonbackdoorbankerdroppertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks