General

  • Target

    44fac30c07c56102bea1c926728c13a1af15db08ad66d3881ab854c287d31703_NeikiAnalytics

  • Size

    128KB

  • Sample

    240521-n4fk2sch33

  • MD5

    b1b88a4ddd45826441c3841cd7b8b740

  • SHA1

    4270b67b532111792ee3ae6af53c6d61631317e1

  • SHA256

    44fac30c07c56102bea1c926728c13a1af15db08ad66d3881ab854c287d31703

  • SHA512

    b2b7880b4a9b41bc9f37ab51eff047c2dbb491e662e0e9156ec9d413e3e8cafb33de2588ff031522967f7d5dc6ad4fac2824d6eff0ffcd272ce9f35bac2d18c6

  • SSDEEP

    1536:TIdQZC5ap3a/34PIZSaMuSOhrx6SZXKNl3pw4yH3hXNZcWiqgF72S7f/QuMXi1oG:tJ3a/djN6SZQgxXNmW2wS7IrHrYj

Malware Config

Targets

    • Target

      44fac30c07c56102bea1c926728c13a1af15db08ad66d3881ab854c287d31703_NeikiAnalytics

    • Size

      128KB

    • MD5

      b1b88a4ddd45826441c3841cd7b8b740

    • SHA1

      4270b67b532111792ee3ae6af53c6d61631317e1

    • SHA256

      44fac30c07c56102bea1c926728c13a1af15db08ad66d3881ab854c287d31703

    • SHA512

      b2b7880b4a9b41bc9f37ab51eff047c2dbb491e662e0e9156ec9d413e3e8cafb33de2588ff031522967f7d5dc6ad4fac2824d6eff0ffcd272ce9f35bac2d18c6

    • SSDEEP

      1536:TIdQZC5ap3a/34PIZSaMuSOhrx6SZXKNl3pw4yH3hXNZcWiqgF72S7f/QuMXi1oG:tJ3a/djN6SZQgxXNmW2wS7IrHrYj

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks