General

  • Target

    4d3c7fa443fea3fb331254543164c460_NeikiAnalytics

  • Size

    401KB

  • Sample

    240509-q3qezafe57

  • MD5

    4d3c7fa443fea3fb331254543164c460

  • SHA1

    800056712209fd04065c60b5b265b2b420d8e41b

  • SHA256

    b408e8087e214226ba13e01fd9ddf100b6b3b8a8e1c1df1d79dac3b4a979142a

  • SHA512

    63da246a0a1d3e74cdddbde839eabe04442299dac084f10d29740896d72ef84736a12d1161c3b88c6b306cf03906302847bf192ec059a0d5623dd68e2df62767

  • SSDEEP

    6144:aLaiSkSUyndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:a+aEndpV6yYP4rbpV6yYPg058KrY

Malware Config

Targets

    • Target

      4d3c7fa443fea3fb331254543164c460_NeikiAnalytics

    • Size

      401KB

    • MD5

      4d3c7fa443fea3fb331254543164c460

    • SHA1

      800056712209fd04065c60b5b265b2b420d8e41b

    • SHA256

      b408e8087e214226ba13e01fd9ddf100b6b3b8a8e1c1df1d79dac3b4a979142a

    • SHA512

      63da246a0a1d3e74cdddbde839eabe04442299dac084f10d29740896d72ef84736a12d1161c3b88c6b306cf03906302847bf192ec059a0d5623dd68e2df62767

    • SSDEEP

      6144:aLaiSkSUyndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:a+aEndpV6yYP4rbpV6yYPg058KrY

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks