General

  • Target

    4fc18931be4fd032bb7413d0f498ace7b5a5fae0f93501a072ab644d68cd5185_NeikiAnalytics

  • Size

    94KB

  • Sample

    240521-p647vsef29

  • MD5

    06a9ed354488792cfe7ab2e6904ebf40

  • SHA1

    09b75d190b569112e66f1928b56dcc9da844c497

  • SHA256

    4fc18931be4fd032bb7413d0f498ace7b5a5fae0f93501a072ab644d68cd5185

  • SHA512

    c2c06e75fe330aa2d60e5b9a8a41918f4cf3034c3d4df3e04fd21846cf0581c37c0050d3bf07ab4e96430557294f9eaaa568963f953fae088769073416d969d3

  • SSDEEP

    1536:o15YoeIOJnd9KZMiO8NaGBq65/c2LzaIZTJ+7LhkiB0MPiKeEAgv:6YjI6d9KSiO8NaGJZVzaMU7uihJ5v

Malware Config

Targets

    • Target

      4fc18931be4fd032bb7413d0f498ace7b5a5fae0f93501a072ab644d68cd5185_NeikiAnalytics

    • Size

      94KB

    • MD5

      06a9ed354488792cfe7ab2e6904ebf40

    • SHA1

      09b75d190b569112e66f1928b56dcc9da844c497

    • SHA256

      4fc18931be4fd032bb7413d0f498ace7b5a5fae0f93501a072ab644d68cd5185

    • SHA512

      c2c06e75fe330aa2d60e5b9a8a41918f4cf3034c3d4df3e04fd21846cf0581c37c0050d3bf07ab4e96430557294f9eaaa568963f953fae088769073416d969d3

    • SSDEEP

      1536:o15YoeIOJnd9KZMiO8NaGBq65/c2LzaIZTJ+7LhkiB0MPiKeEAgv:6YjI6d9KSiO8NaGJZVzaMU7uihJ5v

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks