General

  • Target

    3ba004fae37dc91a576e052dc26b5e8406422893ecc6af0313ed16eaf4be3a11_NeikiAnalytics

  • Size

    300KB

  • Sample

    240521-m36keaba96

  • MD5

    e44dd4a77938c0c561a4e722190cbbd0

  • SHA1

    6c23b7f4df50ba5d9ba20e4fce2662e3c616c799

  • SHA256

    3ba004fae37dc91a576e052dc26b5e8406422893ecc6af0313ed16eaf4be3a11

  • SHA512

    1a59cd9b153145ca0e5633eb1a2af60b2620ca885f449293199acc88eb44b44153cba1a17a2b9e06b853db89a5b5638be890ebc8e5de5104a8b590d1c7e69beb

  • SSDEEP

    6144:0Uvb+eQAqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:0UvKqymCjb87g4/c

Malware Config

Targets

    • Target

      3ba004fae37dc91a576e052dc26b5e8406422893ecc6af0313ed16eaf4be3a11_NeikiAnalytics

    • Size

      300KB

    • MD5

      e44dd4a77938c0c561a4e722190cbbd0

    • SHA1

      6c23b7f4df50ba5d9ba20e4fce2662e3c616c799

    • SHA256

      3ba004fae37dc91a576e052dc26b5e8406422893ecc6af0313ed16eaf4be3a11

    • SHA512

      1a59cd9b153145ca0e5633eb1a2af60b2620ca885f449293199acc88eb44b44153cba1a17a2b9e06b853db89a5b5638be890ebc8e5de5104a8b590d1c7e69beb

    • SSDEEP

      6144:0Uvb+eQAqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:0UvKqymCjb87g4/c

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks