General

  • Target

    426bf6fab0d61296648ef2d30b6a0790_NeikiAnalytics

  • Size

    1.3MB

  • Sample

    240509-qje5wsec87

  • MD5

    426bf6fab0d61296648ef2d30b6a0790

  • SHA1

    4afaf4c673dca1166dd72a6dd4b054baa16a3583

  • SHA256

    40116371873dad6dd1bcafd7ea83b45269218ca76b574a9c409716cb0608ebfa

  • SHA512

    761395c6111a64fb70edbe31b5dbb0a6764ef9f61939ef90f61f78228b5a6b412e889fba2a62786018182f6cb7356335ef0e9ffa0f03181062c8fd20421a5137

  • SSDEEP

    24576:x0aZvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:WokB9f0VP91v92W805IPSOdKgzEoxrl0

Malware Config

Targets

    • Target

      426bf6fab0d61296648ef2d30b6a0790_NeikiAnalytics

    • Size

      1.3MB

    • MD5

      426bf6fab0d61296648ef2d30b6a0790

    • SHA1

      4afaf4c673dca1166dd72a6dd4b054baa16a3583

    • SHA256

      40116371873dad6dd1bcafd7ea83b45269218ca76b574a9c409716cb0608ebfa

    • SHA512

      761395c6111a64fb70edbe31b5dbb0a6764ef9f61939ef90f61f78228b5a6b412e889fba2a62786018182f6cb7356335ef0e9ffa0f03181062c8fd20421a5137

    • SSDEEP

      24576:x0aZvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:WokB9f0VP91v92W805IPSOdKgzEoxrl0

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks