General

  • Target

    be3ab82923149984d4846d01993f68e0_NeikiAnalytics

  • Size

    1.3MB

  • Sample

    240515-lrx88abg4s

  • MD5

    be3ab82923149984d4846d01993f68e0

  • SHA1

    c00a98c3dcdc85c3e150304395cbd7d72556dfbe

  • SHA256

    85856935647812864f43e041fc91464c1f5c71e4f5a795e7df8507232b733368

  • SHA512

    622105eb5b98b89cc24751dd15f19b7329baa0503beb4b0205fcb9ed064792178fabf9d9a0794d112c7eac5411eb0e40cadb2a4917af3c4ddea15148f3e51a4f

  • SSDEEP

    24576:XZvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:XZkB9f0VP91v92W805IPSOdKgzEoxrl0

Malware Config

Targets

    • Target

      be3ab82923149984d4846d01993f68e0_NeikiAnalytics

    • Size

      1.3MB

    • MD5

      be3ab82923149984d4846d01993f68e0

    • SHA1

      c00a98c3dcdc85c3e150304395cbd7d72556dfbe

    • SHA256

      85856935647812864f43e041fc91464c1f5c71e4f5a795e7df8507232b733368

    • SHA512

      622105eb5b98b89cc24751dd15f19b7329baa0503beb4b0205fcb9ed064792178fabf9d9a0794d112c7eac5411eb0e40cadb2a4917af3c4ddea15148f3e51a4f

    • SSDEEP

      24576:XZvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:XZkB9f0VP91v92W805IPSOdKgzEoxrl0

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks