General

  • Target

    3df221445a57309eb19d0ef697c9fc66a402dbcf8f5d275b5f232badff1d3dec_NeikiAnalytics

  • Size

    320KB

  • Sample

    240521-ncngksbe7z

  • MD5

    391ef44d9bc0e358710e2b291d4d8dc0

  • SHA1

    afaeb4377add778b377476c1066e87c618217abb

  • SHA256

    3df221445a57309eb19d0ef697c9fc66a402dbcf8f5d275b5f232badff1d3dec

  • SHA512

    6ebc61414da346280b41ff15652b6e47176da6d028783fb0a8af24e0b6e3382c1a3ccb247c8fb923df2ef222e80b61450d0159fbcd430decaaffc8fbef86fd23

  • SSDEEP

    6144:Hz5r8wadLAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N1I0lOD:J8OYJ07kE0KoFtw2gu9RxrBIUbPLwH9J

Malware Config

Targets

    • Target

      3df221445a57309eb19d0ef697c9fc66a402dbcf8f5d275b5f232badff1d3dec_NeikiAnalytics

    • Size

      320KB

    • MD5

      391ef44d9bc0e358710e2b291d4d8dc0

    • SHA1

      afaeb4377add778b377476c1066e87c618217abb

    • SHA256

      3df221445a57309eb19d0ef697c9fc66a402dbcf8f5d275b5f232badff1d3dec

    • SHA512

      6ebc61414da346280b41ff15652b6e47176da6d028783fb0a8af24e0b6e3382c1a3ccb247c8fb923df2ef222e80b61450d0159fbcd430decaaffc8fbef86fd23

    • SSDEEP

      6144:Hz5r8wadLAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N1I0lOD:J8OYJ07kE0KoFtw2gu9RxrBIUbPLwH9J

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks