General

  • Target

    7c0704d1715a0fd9122cc08d8fac2c60_NeikiAnalytics

  • Size

    384KB

  • Sample

    240509-ta7ekach88

  • MD5

    7c0704d1715a0fd9122cc08d8fac2c60

  • SHA1

    42076210c3c8f2455ac899da4020827991a12906

  • SHA256

    460d6bc40c542e71ddc1955e3fb8c44d68b5172b5c1bf4d9768dc4064dca4764

  • SHA512

    3f9cf9b568205b4d505c71c1ebdcf6f99e28616a147342a64f197303d6971795ae51dcfe87f6c8fca3cb68f23bf3bb39a8dcb846e99c790f30d16290321fcd6d

  • SSDEEP

    6144:BGray8Bpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GAP8:BGQpV6yYPI3cpV6yYPZ0PVdvcY9+8hka

Malware Config

Targets

    • Target

      7c0704d1715a0fd9122cc08d8fac2c60_NeikiAnalytics

    • Size

      384KB

    • MD5

      7c0704d1715a0fd9122cc08d8fac2c60

    • SHA1

      42076210c3c8f2455ac899da4020827991a12906

    • SHA256

      460d6bc40c542e71ddc1955e3fb8c44d68b5172b5c1bf4d9768dc4064dca4764

    • SHA512

      3f9cf9b568205b4d505c71c1ebdcf6f99e28616a147342a64f197303d6971795ae51dcfe87f6c8fca3cb68f23bf3bb39a8dcb846e99c790f30d16290321fcd6d

    • SSDEEP

      6144:BGray8Bpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GAP8:BGQpV6yYPI3cpV6yYPZ0PVdvcY9+8hka

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks