General

  • Target

    7650f86754bbec3b8b970f86bfbea1a0_NeikiAnalytics

  • Size

    448KB

  • Sample

    240509-s1hcpahb8y

  • MD5

    7650f86754bbec3b8b970f86bfbea1a0

  • SHA1

    f317a6166a1c717ea31801cd3e2f85b1928e1cfa

  • SHA256

    ca378623496e81a1a892f92607081824c33b8dad90d857dae8a61cf48ccd4fe9

  • SHA512

    b4de853df6fcc51493d8a89c687e05270a0efce07ba2de900658131d05df0461a6e4aedf9866dd63d68b05b7a4059e6946b20dfc0f9afa63b4ca33d4c984c11d

  • SSDEEP

    6144:4DIoQIQeVCh7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:4DITIQeE7aOlxzr3cOK3TajRfXFMKNxC

Malware Config

Targets

    • Target

      7650f86754bbec3b8b970f86bfbea1a0_NeikiAnalytics

    • Size

      448KB

    • MD5

      7650f86754bbec3b8b970f86bfbea1a0

    • SHA1

      f317a6166a1c717ea31801cd3e2f85b1928e1cfa

    • SHA256

      ca378623496e81a1a892f92607081824c33b8dad90d857dae8a61cf48ccd4fe9

    • SHA512

      b4de853df6fcc51493d8a89c687e05270a0efce07ba2de900658131d05df0461a6e4aedf9866dd63d68b05b7a4059e6946b20dfc0f9afa63b4ca33d4c984c11d

    • SSDEEP

      6144:4DIoQIQeVCh7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:4DITIQeE7aOlxzr3cOK3TajRfXFMKNxC

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks