General

  • Target

    7fa5567de359aa04def255caec9890e0_NeikiAnalytics

  • Size

    227KB

  • Sample

    240509-tfvyqaab9x

  • MD5

    7fa5567de359aa04def255caec9890e0

  • SHA1

    a2ab1801793c70ce522130f70649034ca2c087e5

  • SHA256

    849fa57cf77b619480785be47c6d6ba1a9b37b2904b591662fa12c5b61796ebb

  • SHA512

    22aca837e3f6283940ba0564ee1845bfb6d41c89086845b13c2642f7e912c2bcb8540dc58882ade3b9bb87cbb0c3e310643ac300077985b1964c18265e184bc5

  • SSDEEP

    6144:4gNMdOwpj0Kyjzzzvm7U5j2QE2+g24Id2jFHu:4grmwdHiojj+Td20

Malware Config

Targets

    • Target

      7fa5567de359aa04def255caec9890e0_NeikiAnalytics

    • Size

      227KB

    • MD5

      7fa5567de359aa04def255caec9890e0

    • SHA1

      a2ab1801793c70ce522130f70649034ca2c087e5

    • SHA256

      849fa57cf77b619480785be47c6d6ba1a9b37b2904b591662fa12c5b61796ebb

    • SHA512

      22aca837e3f6283940ba0564ee1845bfb6d41c89086845b13c2642f7e912c2bcb8540dc58882ade3b9bb87cbb0c3e310643ac300077985b1964c18265e184bc5

    • SSDEEP

      6144:4gNMdOwpj0Kyjzzzvm7U5j2QE2+g24Id2jFHu:4grmwdHiojj+Td20

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks