General

  • Target

    788019352568a0f0e002204a426f8d30_NeikiAnalytics

  • Size

    143KB

  • Sample

    240509-s5fpnace38

  • MD5

    788019352568a0f0e002204a426f8d30

  • SHA1

    faa6bbf4b5d08dbbba5f02d2ad0c82ffb27632e8

  • SHA256

    1d1c3a120b366af2eb801639eebec9835b4c090e63e5b97e96ace5bb77b50649

  • SHA512

    9f93edce1c82b95e5be1132a9d97cfc6066262903991932f6d2db1c6f0b64092d4612283423a2a28df9e9aa4ebd31599f111331e1eadce52c2a4eefaaa4f19f5

  • SSDEEP

    1536:jSJig1fUUA4bj6tR1lbU/fvMBmmUQ5ziJE93isirBUBEVGBtVM2hZV03fca13y:jmcpe6tpU/Bm3N93bsGfhv0vt3y

Malware Config

Targets

    • Target

      788019352568a0f0e002204a426f8d30_NeikiAnalytics

    • Size

      143KB

    • MD5

      788019352568a0f0e002204a426f8d30

    • SHA1

      faa6bbf4b5d08dbbba5f02d2ad0c82ffb27632e8

    • SHA256

      1d1c3a120b366af2eb801639eebec9835b4c090e63e5b97e96ace5bb77b50649

    • SHA512

      9f93edce1c82b95e5be1132a9d97cfc6066262903991932f6d2db1c6f0b64092d4612283423a2a28df9e9aa4ebd31599f111331e1eadce52c2a4eefaaa4f19f5

    • SSDEEP

      1536:jSJig1fUUA4bj6tR1lbU/fvMBmmUQ5ziJE93isirBUBEVGBtVM2hZV03fca13y:jmcpe6tpU/Bm3N93bsGfhv0vt3y

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks