General

  • Target

    4f69ce79cde884af30109df93bacb7deddc8d1ad6f5d851c6ed4051f9fc48d8a_NeikiAnalytics

  • Size

    229KB

  • Sample

    240521-p5krtsee53

  • MD5

    ad6119a15ab51b456b5d1f9241b878f0

  • SHA1

    f5eca17f8d6f0627f97c9109e080ed04361030af

  • SHA256

    4f69ce79cde884af30109df93bacb7deddc8d1ad6f5d851c6ed4051f9fc48d8a

  • SHA512

    590a756a56e7ed1379fcdbed46aead2037cb5e0975bb618a39a37fd065ceaff921f9eac8ab36d898f99c2d8d19ac1aca4fa48288611e8dc592b0c69e784c1672

  • SSDEEP

    6144:CAUtuJ6N0cXxgI2I271+HZ/pvkym/89bYEwPhCKvav:CAUtE6CcXxgIQ7AIfFfvav

Malware Config

Targets

    • Target

      4f69ce79cde884af30109df93bacb7deddc8d1ad6f5d851c6ed4051f9fc48d8a_NeikiAnalytics

    • Size

      229KB

    • MD5

      ad6119a15ab51b456b5d1f9241b878f0

    • SHA1

      f5eca17f8d6f0627f97c9109e080ed04361030af

    • SHA256

      4f69ce79cde884af30109df93bacb7deddc8d1ad6f5d851c6ed4051f9fc48d8a

    • SHA512

      590a756a56e7ed1379fcdbed46aead2037cb5e0975bb618a39a37fd065ceaff921f9eac8ab36d898f99c2d8d19ac1aca4fa48288611e8dc592b0c69e784c1672

    • SSDEEP

      6144:CAUtuJ6N0cXxgI2I271+HZ/pvkym/89bYEwPhCKvav:CAUtE6CcXxgIQ7AIfFfvav

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks