General

  • Target

    4d0b39efc2b09ac49eebd5c5de0b7670_NeikiAnalytics

  • Size

    177KB

  • Sample

    240509-q3dq6sfe42

  • MD5

    4d0b39efc2b09ac49eebd5c5de0b7670

  • SHA1

    fff5426088d89510804bc652472ffade83687298

  • SHA256

    1849f4a052f760744869aa889c71ad024be16f3a8c70be7c9f2ea0bc9f354942

  • SHA512

    07ac6476c7fb8d6dee02e9610e3238bf227f76bfca36de3c08964ec6a0853164f69855b337f0cc185fdf8ca8f2a848f1a60c4bb5bd42a79ea091775de528532b

  • SSDEEP

    3072:THf+qKHqi/allLdg3q/haR5sS+vfvLHhjh8g1eGFyOsa:yNZal9dga/harSvLHh98gwG0ON

Malware Config

Targets

    • Target

      4d0b39efc2b09ac49eebd5c5de0b7670_NeikiAnalytics

    • Size

      177KB

    • MD5

      4d0b39efc2b09ac49eebd5c5de0b7670

    • SHA1

      fff5426088d89510804bc652472ffade83687298

    • SHA256

      1849f4a052f760744869aa889c71ad024be16f3a8c70be7c9f2ea0bc9f354942

    • SHA512

      07ac6476c7fb8d6dee02e9610e3238bf227f76bfca36de3c08964ec6a0853164f69855b337f0cc185fdf8ca8f2a848f1a60c4bb5bd42a79ea091775de528532b

    • SSDEEP

      3072:THf+qKHqi/allLdg3q/haR5sS+vfvLHhjh8g1eGFyOsa:yNZal9dga/harSvLHh98gwG0ON

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks