General

  • Target

    4cb0dd0d23ad6d654349a1f151ebb400_NeikiAnalytics

  • Size

    669KB

  • Sample

    240509-q2yd7afe24

  • MD5

    4cb0dd0d23ad6d654349a1f151ebb400

  • SHA1

    e3b47ad0814ab984fcf9d81e12df62a0b1cdc15c

  • SHA256

    e1c5b8e41d539707ec734727c03568e739e058412112e04e935d5f9d75dab7e8

  • SHA512

    bd8762df982cf52fba2fa6f80fa40567580a06160ae342df865227985b6a07b5d56843e71dd98026340247c8ce37aed397d2f3117add81c2ed53d003709647e8

  • SSDEEP

    12288:z2DLHsceVKhMpQnqr+cI3a72LXrY6x46UbR/qYglMi:zXchMpQnqrdX72LbY6x46uR/qYglMi

Malware Config

Targets

    • Target

      4cb0dd0d23ad6d654349a1f151ebb400_NeikiAnalytics

    • Size

      669KB

    • MD5

      4cb0dd0d23ad6d654349a1f151ebb400

    • SHA1

      e3b47ad0814ab984fcf9d81e12df62a0b1cdc15c

    • SHA256

      e1c5b8e41d539707ec734727c03568e739e058412112e04e935d5f9d75dab7e8

    • SHA512

      bd8762df982cf52fba2fa6f80fa40567580a06160ae342df865227985b6a07b5d56843e71dd98026340247c8ce37aed397d2f3117add81c2ed53d003709647e8

    • SSDEEP

      12288:z2DLHsceVKhMpQnqr+cI3a72LXrY6x46UbR/qYglMi:zXchMpQnqrdX72LbY6x46uR/qYglMi

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks