General

  • Target

    3e9c57a152f9d4ebc89326e86643c1099e40e9ce17c6942466a513d66605ea79_NeikiAnalytics

  • Size

    448KB

  • Sample

    240521-ne7cgabf79

  • MD5

    a9488559c9417e7706c21dbb5a892460

  • SHA1

    2d9bdc48a77c8984fe2b66dfa5eeae4e73e6a9c9

  • SHA256

    3e9c57a152f9d4ebc89326e86643c1099e40e9ce17c6942466a513d66605ea79

  • SHA512

    45685fb1d533bb330341a27ab32ce137039c166a24f4cf4154977cfac5e32f174e042783c76cadb8a407f7e62c3f3312f712954ec4f3669e6f34cf6d992c4f28

  • SSDEEP

    6144:Ot4YGVMs87aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:Ot4YGV07aOlxzr3cOK3TajRfXFMKNxC

Malware Config

Targets

    • Target

      3e9c57a152f9d4ebc89326e86643c1099e40e9ce17c6942466a513d66605ea79_NeikiAnalytics

    • Size

      448KB

    • MD5

      a9488559c9417e7706c21dbb5a892460

    • SHA1

      2d9bdc48a77c8984fe2b66dfa5eeae4e73e6a9c9

    • SHA256

      3e9c57a152f9d4ebc89326e86643c1099e40e9ce17c6942466a513d66605ea79

    • SHA512

      45685fb1d533bb330341a27ab32ce137039c166a24f4cf4154977cfac5e32f174e042783c76cadb8a407f7e62c3f3312f712954ec4f3669e6f34cf6d992c4f28

    • SSDEEP

      6144:Ot4YGVMs87aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:Ot4YGV07aOlxzr3cOK3TajRfXFMKNxC

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks