General

  • Target

    4c479f18ef639595c91aac8ddfd54e00_NeikiAnalytics

  • Size

    282KB

  • Sample

    240509-q2a9nafd74

  • MD5

    4c479f18ef639595c91aac8ddfd54e00

  • SHA1

    868771f94965c18a211b70168e86ec09d8d48f9d

  • SHA256

    3275f5ed0881e6c95d8ae5707da478443ec23716020afb46346e010969bf0646

  • SHA512

    ec6f2e5f9d4e8e558127a3f719583a9aa2bb00ce8b232b1d0db484d1f6481905aa201e1951269988269e0025b0849da215f84ca86fb1baddeb308cc4fc402c3e

  • SSDEEP

    6144:PsZthloC6aLAkcCdfUYkEjiPISUOgW9X+hOGzC/:Pstlo+LAkcCdfUYkmZzcukG2/

Malware Config

Targets

    • Target

      4c479f18ef639595c91aac8ddfd54e00_NeikiAnalytics

    • Size

      282KB

    • MD5

      4c479f18ef639595c91aac8ddfd54e00

    • SHA1

      868771f94965c18a211b70168e86ec09d8d48f9d

    • SHA256

      3275f5ed0881e6c95d8ae5707da478443ec23716020afb46346e010969bf0646

    • SHA512

      ec6f2e5f9d4e8e558127a3f719583a9aa2bb00ce8b232b1d0db484d1f6481905aa201e1951269988269e0025b0849da215f84ca86fb1baddeb308cc4fc402c3e

    • SSDEEP

      6144:PsZthloC6aLAkcCdfUYkEjiPISUOgW9X+hOGzC/:Pstlo+LAkcCdfUYkmZzcukG2/

    Score
    10/10
    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks