General

  • Target

    4d7c4e1d8d7f9aa68e43fc2d498254326cd343c3ac28104d3d7ea83c024dce44_NeikiAnalytics

  • Size

    448KB

  • Sample

    240521-px9qzsec51

  • MD5

    e31a27e7232a9331d0da6152c05ffd10

  • SHA1

    137a6f738412eea23c1721a6ffda7ee1dd961e6b

  • SHA256

    4d7c4e1d8d7f9aa68e43fc2d498254326cd343c3ac28104d3d7ea83c024dce44

  • SHA512

    35a1c4e5df597143f366cb2407676dab67f0eeda53bb003ba132fd6935390a0845d088cc12bef8316387b1227df5bc0d4022feba38d7c610000ce2fcd1897a52

  • SSDEEP

    12288:YIOpV6yYPMLnfBJKFbhDwBpV6yYP6Utri+Woh3YRVDDf1LcXD3v+2JFrfzj:0WMLnfBJKhVwBW6Utri+WoxYRVDr1Lc/

Malware Config

Targets

    • Target

      4d7c4e1d8d7f9aa68e43fc2d498254326cd343c3ac28104d3d7ea83c024dce44_NeikiAnalytics

    • Size

      448KB

    • MD5

      e31a27e7232a9331d0da6152c05ffd10

    • SHA1

      137a6f738412eea23c1721a6ffda7ee1dd961e6b

    • SHA256

      4d7c4e1d8d7f9aa68e43fc2d498254326cd343c3ac28104d3d7ea83c024dce44

    • SHA512

      35a1c4e5df597143f366cb2407676dab67f0eeda53bb003ba132fd6935390a0845d088cc12bef8316387b1227df5bc0d4022feba38d7c610000ce2fcd1897a52

    • SSDEEP

      12288:YIOpV6yYPMLnfBJKFbhDwBpV6yYP6Utri+Woh3YRVDDf1LcXD3v+2JFrfzj:0WMLnfBJKhVwBW6Utri+WoxYRVDr1Lc/

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks