General

  • Target

    8803c1931c3186a206608b1fc52f3d20_NeikiAnalytics.exe

  • Size

    772KB

  • Sample

    240517-csyfyadb93

  • MD5

    8803c1931c3186a206608b1fc52f3d20

  • SHA1

    611a329c1c769b12077c5678b118f9b334cebdb5

  • SHA256

    0740e7395c20e36a2b4e40d01b1de45a8d957a8d2411d2041ee3eda3a87b9141

  • SHA512

    29b4eaddcdf915a9e96acccdda850719dda3715de76a43aa5b5d74511b815343d39d4d46f3419346c3b0adb7e5ca28d1191efa687fc4b5afd7e80165937abe1d

  • SSDEEP

    24576:qW298E8uxAdcl3/DEEdlW+qmd6f5HpmwhNeZLLGDtEC5AoFhR4gNUagtu:a98E8ux8cl3/YEzW+qmd6flpmkNeZ/G3

Malware Config

Targets

    • Target

      8803c1931c3186a206608b1fc52f3d20_NeikiAnalytics.exe

    • Size

      772KB

    • MD5

      8803c1931c3186a206608b1fc52f3d20

    • SHA1

      611a329c1c769b12077c5678b118f9b334cebdb5

    • SHA256

      0740e7395c20e36a2b4e40d01b1de45a8d957a8d2411d2041ee3eda3a87b9141

    • SHA512

      29b4eaddcdf915a9e96acccdda850719dda3715de76a43aa5b5d74511b815343d39d4d46f3419346c3b0adb7e5ca28d1191efa687fc4b5afd7e80165937abe1d

    • SSDEEP

      24576:qW298E8uxAdcl3/DEEdlW+qmd6f5HpmwhNeZLLGDtEC5AoFhR4gNUagtu:a98E8ux8cl3/YEzW+qmd6flpmkNeZ/G3

    Score
    10/10
    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks