General

  • Target

    75bf5586b70c2b6b8e55df8ff9484e20_NeikiAnalytics

  • Size

    128KB

  • Sample

    240509-szlnqahb3z

  • MD5

    75bf5586b70c2b6b8e55df8ff9484e20

  • SHA1

    6baf6e1402bf23c8d1cd594f721ab82a478bc20f

  • SHA256

    4155c83f489dfbf05e46f2b95ce65d319bfd6739b9b44b7a606fd93886e540ee

  • SHA512

    5391ef2b4560dc1085ecc7f99883ee9cc4c6ae454d5c448cd8564a673dddcd8e1ad7614ae216ac705beaf4500643969b9e396d99261a27650835891b5e8b4ff0

  • SSDEEP

    1536:PoQ2kDn21TURG13DW+wc58m9QGCYlOvosRQDORfRa9HprmRfRJCLIXG:PoInW7yZGKJQseDO5wkpHxG

Malware Config

Targets

    • Target

      75bf5586b70c2b6b8e55df8ff9484e20_NeikiAnalytics

    • Size

      128KB

    • MD5

      75bf5586b70c2b6b8e55df8ff9484e20

    • SHA1

      6baf6e1402bf23c8d1cd594f721ab82a478bc20f

    • SHA256

      4155c83f489dfbf05e46f2b95ce65d319bfd6739b9b44b7a606fd93886e540ee

    • SHA512

      5391ef2b4560dc1085ecc7f99883ee9cc4c6ae454d5c448cd8564a673dddcd8e1ad7614ae216ac705beaf4500643969b9e396d99261a27650835891b5e8b4ff0

    • SSDEEP

      1536:PoQ2kDn21TURG13DW+wc58m9QGCYlOvosRQDORfRa9HprmRfRJCLIXG:PoInW7yZGKJQseDO5wkpHxG

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks