General

  • Target

    3640b373f6588593a550af5dc43e42ebe8db1c4e0b70e518df661160637c109a_NeikiAnalytics

  • Size

    320KB

  • Sample

    240521-mhdznaab7y

  • MD5

    df020d19151be00aed9e92413c542820

  • SHA1

    9a8e4b8e215acb1f082977a68124c3ace7eb723b

  • SHA256

    3640b373f6588593a550af5dc43e42ebe8db1c4e0b70e518df661160637c109a

  • SHA512

    d7ba1222bc89fb8b08ef90c81124da8dfaf5d3469bdc87156ec5a918e5f98ac95efbed549f5f33eed3052c11f106c1ee961630dbee1417d01b566d06de660800

  • SSDEEP

    6144:2HGLcqGRkYcgTCndOGeKTame6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQk:2mQqGRkOedOGeKTaPkY660fIaDZkY66+

Malware Config

Targets

    • Target

      3640b373f6588593a550af5dc43e42ebe8db1c4e0b70e518df661160637c109a_NeikiAnalytics

    • Size

      320KB

    • MD5

      df020d19151be00aed9e92413c542820

    • SHA1

      9a8e4b8e215acb1f082977a68124c3ace7eb723b

    • SHA256

      3640b373f6588593a550af5dc43e42ebe8db1c4e0b70e518df661160637c109a

    • SHA512

      d7ba1222bc89fb8b08ef90c81124da8dfaf5d3469bdc87156ec5a918e5f98ac95efbed549f5f33eed3052c11f106c1ee961630dbee1417d01b566d06de660800

    • SSDEEP

      6144:2HGLcqGRkYcgTCndOGeKTame6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQk:2mQqGRkOedOGeKTaPkY660fIaDZkY66+

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks