General

  • Target

    482921e7ef31d0249dfb5c29908820bbc270ad9eb14a5c111329b6c86ff46bef_NeikiAnalytics

  • Size

    384KB

  • Sample

    240521-pfbgvsdd35

  • MD5

    f67a775691f28d81a0454d58ee470010

  • SHA1

    a2e0282fc72b9614b02c87bda46d3a1dcd9287e7

  • SHA256

    482921e7ef31d0249dfb5c29908820bbc270ad9eb14a5c111329b6c86ff46bef

  • SHA512

    0e521d08d516f6dbf9471e52e190d170cdb72b13a01d9ddf750691320c9c766d788e928894820ca8412f439f4f12ce5220735abded0d3095620ea1902aa854ba

  • SSDEEP

    6144:k7ep3H38ylpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoH3ygND:Vp3H38apV6yYPMLnfBJKFbhDwBpV6yY9

Malware Config

Targets

    • Target

      482921e7ef31d0249dfb5c29908820bbc270ad9eb14a5c111329b6c86ff46bef_NeikiAnalytics

    • Size

      384KB

    • MD5

      f67a775691f28d81a0454d58ee470010

    • SHA1

      a2e0282fc72b9614b02c87bda46d3a1dcd9287e7

    • SHA256

      482921e7ef31d0249dfb5c29908820bbc270ad9eb14a5c111329b6c86ff46bef

    • SHA512

      0e521d08d516f6dbf9471e52e190d170cdb72b13a01d9ddf750691320c9c766d788e928894820ca8412f439f4f12ce5220735abded0d3095620ea1902aa854ba

    • SSDEEP

      6144:k7ep3H38ylpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoH3ygND:Vp3H38apV6yYPMLnfBJKFbhDwBpV6yY9

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks