General

  • Target

    29ae356cbcfffee105638e4747ce1e60_NeikiAnalytics

  • Size

    1.1MB

  • Sample

    240510-ah9ecaae73

  • MD5

    29ae356cbcfffee105638e4747ce1e60

  • SHA1

    f450a1868a85400c4f83c6d255688886f9fab42a

  • SHA256

    3b22aae7d42f581aa596f03fd5ff5f74cb78d572321b4e5202218f1e413268ce

  • SHA512

    b8858e6eacf0f777fff1b84e1049f8267b3036bc9b28defd9e7f3d7880c4a5587fcdc69ae36c73f589b25b4d07d22bd518ab0db4517303a2c9f8e1aa1ee1c92b

  • SSDEEP

    24576:9G/wrQg5Wm0BmmvFimm0MTP7hm0BmmvFimm0HkEyDucEQX:9G/eQg5SiLi0kEyDucEQX

Malware Config

Targets

    • Target

      29ae356cbcfffee105638e4747ce1e60_NeikiAnalytics

    • Size

      1.1MB

    • MD5

      29ae356cbcfffee105638e4747ce1e60

    • SHA1

      f450a1868a85400c4f83c6d255688886f9fab42a

    • SHA256

      3b22aae7d42f581aa596f03fd5ff5f74cb78d572321b4e5202218f1e413268ce

    • SHA512

      b8858e6eacf0f777fff1b84e1049f8267b3036bc9b28defd9e7f3d7880c4a5587fcdc69ae36c73f589b25b4d07d22bd518ab0db4517303a2c9f8e1aa1ee1c92b

    • SSDEEP

      24576:9G/wrQg5Wm0BmmvFimm0MTP7hm0BmmvFimm0HkEyDucEQX:9G/eQg5SiLi0kEyDucEQX

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks