General

  • Target

    49e3f7a0dff11dc1e1f11c6a950fee50_NeikiAnalytics

  • Size

    109KB

  • Sample

    240509-qw5ajsfb54

  • MD5

    49e3f7a0dff11dc1e1f11c6a950fee50

  • SHA1

    1c08c0a8225127c74a440cdb35f4b52cf31193fa

  • SHA256

    2d39dfb5210862a4189d230750c5ed1db5a0ea0d8ca0e536706b914fe2c338ae

  • SHA512

    e79d5b24b0cf066b2b5d0c4c14272fac0ff6df855974455d3c6230028d20025065f8932553e5ae027d3895a07c0d57e3b3b23a55735ea5fb6cdbcbd4540b7049

  • SSDEEP

    3072:EU6B1uRXSJ9JLCqwzBu1DjHLMVDqqkSpR:t6ASJ9xwtu1DjrFqhz

Malware Config

Targets

    • Target

      49e3f7a0dff11dc1e1f11c6a950fee50_NeikiAnalytics

    • Size

      109KB

    • MD5

      49e3f7a0dff11dc1e1f11c6a950fee50

    • SHA1

      1c08c0a8225127c74a440cdb35f4b52cf31193fa

    • SHA256

      2d39dfb5210862a4189d230750c5ed1db5a0ea0d8ca0e536706b914fe2c338ae

    • SHA512

      e79d5b24b0cf066b2b5d0c4c14272fac0ff6df855974455d3c6230028d20025065f8932553e5ae027d3895a07c0d57e3b3b23a55735ea5fb6cdbcbd4540b7049

    • SSDEEP

      3072:EU6B1uRXSJ9JLCqwzBu1DjHLMVDqqkSpR:t6ASJ9xwtu1DjrFqhz

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks