General

  • Target

    6eb5ccc956742ffb376b748276884bc0_NeikiAnalytics

  • Size

    664KB

  • Sample

    240509-smc6tabc57

  • MD5

    6eb5ccc956742ffb376b748276884bc0

  • SHA1

    9a7fd049986bbfa2fbfbe4da391f0ad6d04a01d2

  • SHA256

    af10cce59225b7ffd8c117d9175b26b2779b1fd4adbd5acfdd48671d49797fad

  • SHA512

    174ff64088d0f644dbcc6a7bbff9be5ab96020a90196e33467d06cc71649e2e543e7ff75fa08fa85f83d11be8e3f67df5686c9cbddde9b7a005d786f13f0f530

  • SSDEEP

    12288:WFAZt+u5npV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJm4:WnYnW4XWleKWNUir2MhNl6zX3w9As/xi

Malware Config

Targets

    • Target

      6eb5ccc956742ffb376b748276884bc0_NeikiAnalytics

    • Size

      664KB

    • MD5

      6eb5ccc956742ffb376b748276884bc0

    • SHA1

      9a7fd049986bbfa2fbfbe4da391f0ad6d04a01d2

    • SHA256

      af10cce59225b7ffd8c117d9175b26b2779b1fd4adbd5acfdd48671d49797fad

    • SHA512

      174ff64088d0f644dbcc6a7bbff9be5ab96020a90196e33467d06cc71649e2e543e7ff75fa08fa85f83d11be8e3f67df5686c9cbddde9b7a005d786f13f0f530

    • SSDEEP

      12288:WFAZt+u5npV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJm4:WnYnW4XWleKWNUir2MhNl6zX3w9As/xi

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks