General

  • Target

    70070493aefdd6170d9228f428726ba0_NeikiAnalytics

  • Size

    89KB

  • Sample

    240509-spsz2sbd95

  • MD5

    70070493aefdd6170d9228f428726ba0

  • SHA1

    098fa6efefa872f31d5e91114dbdf5d2e8671aaa

  • SHA256

    be7a459c6f144601f95817f3d964a9c9471d928bc3df1ef457925bde69dad59b

  • SHA512

    f7048cd4e637c12cb3039cd91d5b75e173864aabbb42bc7472ca2ee161717bc65da6532ecdc9ea9d87d5bf910f8cfc7089e1efbc5e3910fd5005eb27938b53bc

  • SSDEEP

    1536:bELPE8CCJgeAfmrXJ2eK4fCz9gE1tgFuFuRQcTD68a+VMKKTRVGFtUhQfR1WRaRR:bEHCWtgz9gEmusecSr4MKy3G7UEqMM6

Malware Config

Targets

    • Target

      70070493aefdd6170d9228f428726ba0_NeikiAnalytics

    • Size

      89KB

    • MD5

      70070493aefdd6170d9228f428726ba0

    • SHA1

      098fa6efefa872f31d5e91114dbdf5d2e8671aaa

    • SHA256

      be7a459c6f144601f95817f3d964a9c9471d928bc3df1ef457925bde69dad59b

    • SHA512

      f7048cd4e637c12cb3039cd91d5b75e173864aabbb42bc7472ca2ee161717bc65da6532ecdc9ea9d87d5bf910f8cfc7089e1efbc5e3910fd5005eb27938b53bc

    • SSDEEP

      1536:bELPE8CCJgeAfmrXJ2eK4fCz9gE1tgFuFuRQcTD68a+VMKKTRVGFtUhQfR1WRaRR:bEHCWtgz9gEmusecSr4MKy3G7UEqMM6

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks