General

  • Target

    4b4860e82dfb9a2c63daaecdf083aabf88cab53bdea051ad8070e6a0e84ac8d6_NeikiAnalytics

  • Size

    416KB

  • Sample

    240521-pqd1qsdh4y

  • MD5

    4c2d16c64b7fb0324ffe1d07147bdd70

  • SHA1

    875e8632c4d96edc1eb4668651c924fe0ec5a6b0

  • SHA256

    4b4860e82dfb9a2c63daaecdf083aabf88cab53bdea051ad8070e6a0e84ac8d6

  • SHA512

    5236e0796b48f479f0fff33a52c48fa6c6bd547f5bf438eeb0e54fb7afd9cc5147949a091e33541217fe13426291bcc5f9e07488be5682dbf3123703c3050a9f

  • SSDEEP

    12288:wOFVpsYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:LvpsYJ07kE0KoFtw2gu9RxrBIUbPLwHh

Malware Config

Targets

    • Target

      4b4860e82dfb9a2c63daaecdf083aabf88cab53bdea051ad8070e6a0e84ac8d6_NeikiAnalytics

    • Size

      416KB

    • MD5

      4c2d16c64b7fb0324ffe1d07147bdd70

    • SHA1

      875e8632c4d96edc1eb4668651c924fe0ec5a6b0

    • SHA256

      4b4860e82dfb9a2c63daaecdf083aabf88cab53bdea051ad8070e6a0e84ac8d6

    • SHA512

      5236e0796b48f479f0fff33a52c48fa6c6bd547f5bf438eeb0e54fb7afd9cc5147949a091e33541217fe13426291bcc5f9e07488be5682dbf3123703c3050a9f

    • SSDEEP

      12288:wOFVpsYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:LvpsYJ07kE0KoFtw2gu9RxrBIUbPLwHh

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks