General

  • Target

    4f109f42f9400f96a3859b92c6e8eef9e1328546a880027cb42a7cdbb9f620e0_NeikiAnalytics

  • Size

    386KB

  • Sample

    240521-p4jhdaed93

  • MD5

    ee660dd337b5cce529c4b24e14dfbb90

  • SHA1

    8bdf9be339764c74482961f5adb4ef2b16ed0d20

  • SHA256

    4f109f42f9400f96a3859b92c6e8eef9e1328546a880027cb42a7cdbb9f620e0

  • SHA512

    2e758e5cfe6982a56bcafeecb7c3a446017c117c35d5962c977833a93bc0319c413054bb163c98fbdb8b34e4027e7cd9448da5275f02b5c2951519de69a5d39e

  • SSDEEP

    12288:IsmrCZYE6YYBHpd0uD319ZvSntnhp352SCdL:I1rCyE6YYBHpd0uD319ZvSntnhp352So

Malware Config

Targets

    • Target

      4f109f42f9400f96a3859b92c6e8eef9e1328546a880027cb42a7cdbb9f620e0_NeikiAnalytics

    • Size

      386KB

    • MD5

      ee660dd337b5cce529c4b24e14dfbb90

    • SHA1

      8bdf9be339764c74482961f5adb4ef2b16ed0d20

    • SHA256

      4f109f42f9400f96a3859b92c6e8eef9e1328546a880027cb42a7cdbb9f620e0

    • SHA512

      2e758e5cfe6982a56bcafeecb7c3a446017c117c35d5962c977833a93bc0319c413054bb163c98fbdb8b34e4027e7cd9448da5275f02b5c2951519de69a5d39e

    • SSDEEP

      12288:IsmrCZYE6YYBHpd0uD319ZvSntnhp352SCdL:I1rCyE6YYBHpd0uD319ZvSntnhp352So

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks