General

  • Target

    70d18614addf52cc9c95fee5478e2c90_NeikiAnalytics

  • Size

    1.2MB

  • Sample

    240509-sq511age9y

  • MD5

    70d18614addf52cc9c95fee5478e2c90

  • SHA1

    f9b257fb480d52df3da8bafecd00fc69b5f6223a

  • SHA256

    339538e8be60fcb2fa700426a44fb7d9ba1bde4970e53719ddbfbebffef98ca1

  • SHA512

    5dd9233d89c7bc707dadbd2c96321861e7bcf7b6496d9c787bfe1798523f252f819875ccc6d5820cd0825343be702828af4390be6c4bfa65a9bdf9164aa2f73d

  • SSDEEP

    12288:SKYlFiWZCXwpnsKvNA+XTvZHWuEo3oWiQ4ca:SKYlFiWZpsKv2EvZHp3oWiQ4ca

Malware Config

Targets

    • Target

      70d18614addf52cc9c95fee5478e2c90_NeikiAnalytics

    • Size

      1.2MB

    • MD5

      70d18614addf52cc9c95fee5478e2c90

    • SHA1

      f9b257fb480d52df3da8bafecd00fc69b5f6223a

    • SHA256

      339538e8be60fcb2fa700426a44fb7d9ba1bde4970e53719ddbfbebffef98ca1

    • SHA512

      5dd9233d89c7bc707dadbd2c96321861e7bcf7b6496d9c787bfe1798523f252f819875ccc6d5820cd0825343be702828af4390be6c4bfa65a9bdf9164aa2f73d

    • SSDEEP

      12288:SKYlFiWZCXwpnsKvNA+XTvZHWuEo3oWiQ4ca:SKYlFiWZpsKv2EvZHp3oWiQ4ca

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks