General

  • Target

    8671da1d1e23ec13e9669b06adb46160_NeikiAnalytics

  • Size

    320KB

  • Sample

    240509-trfyyaah4s

  • MD5

    8671da1d1e23ec13e9669b06adb46160

  • SHA1

    4661b352138ee804e0487f9667df9e7b301900cb

  • SHA256

    ec23d94c66dac3dc74bba9dd25d1b98cdbc1bd08818dcfc619fdddf9d58fb1df

  • SHA512

    b2aef488438c6a16b7c41abeb9fee41e269e9ffa915fca4d554d1b50d86fcc2ab85a558048a0839febe072736e4b23b4941e0060566e6795b33fbcf178f135d4

  • SSDEEP

    6144:ngQLYaf/LAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N1I0lOD:gQLAYJ07kE0KoFtw2gu9RxrBIUbPLwHT

Malware Config

Targets

    • Target

      8671da1d1e23ec13e9669b06adb46160_NeikiAnalytics

    • Size

      320KB

    • MD5

      8671da1d1e23ec13e9669b06adb46160

    • SHA1

      4661b352138ee804e0487f9667df9e7b301900cb

    • SHA256

      ec23d94c66dac3dc74bba9dd25d1b98cdbc1bd08818dcfc619fdddf9d58fb1df

    • SHA512

      b2aef488438c6a16b7c41abeb9fee41e269e9ffa915fca4d554d1b50d86fcc2ab85a558048a0839febe072736e4b23b4941e0060566e6795b33fbcf178f135d4

    • SSDEEP

      6144:ngQLYaf/LAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N1I0lOD:gQLAYJ07kE0KoFtw2gu9RxrBIUbPLwHT

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks