General

  • Target

    4ae8d50ce80329fa923ad1d3877727b0_NeikiAnalytics

  • Size

    89KB

  • Sample

    240509-qywq7acd2s

  • MD5

    4ae8d50ce80329fa923ad1d3877727b0

  • SHA1

    e8b3f84349810384145562a386569eb581c6f69f

  • SHA256

    f2cd0f98d32e15c88bb1da75980ab1b1c92ce685f2f579107d8b529e85916088

  • SHA512

    b4f8964953388652b30605dde4d0673c5d8e644deb873bbf8aacac73bbb6507ba0b68d8c5d9b4b96d93e40ea62291341250a3c563eae3c8076b9fab08ddcc591

  • SSDEEP

    1536:JdPU6I9G//SW/aEZzyPy0AuSwVETkL8RQTD68a+VMKKTRVGFtUhQfR1WRaROR8R:TPU3c//SW/aEEtbx4eSr4MKy3G7UEqMR

Malware Config

Targets

    • Target

      4ae8d50ce80329fa923ad1d3877727b0_NeikiAnalytics

    • Size

      89KB

    • MD5

      4ae8d50ce80329fa923ad1d3877727b0

    • SHA1

      e8b3f84349810384145562a386569eb581c6f69f

    • SHA256

      f2cd0f98d32e15c88bb1da75980ab1b1c92ce685f2f579107d8b529e85916088

    • SHA512

      b4f8964953388652b30605dde4d0673c5d8e644deb873bbf8aacac73bbb6507ba0b68d8c5d9b4b96d93e40ea62291341250a3c563eae3c8076b9fab08ddcc591

    • SSDEEP

      1536:JdPU6I9G//SW/aEZzyPy0AuSwVETkL8RQTD68a+VMKKTRVGFtUhQfR1WRaROR8R:TPU3c//SW/aEEtbx4eSr4MKy3G7UEqMR

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks