General

  • Target

    58faa4df6535a2d1146958e3717e8ab0_NeikiAnalytics.exe

  • Size

    768KB

  • Sample

    240529-2raqxscg5x

  • MD5

    58faa4df6535a2d1146958e3717e8ab0

  • SHA1

    12fcf0aaa42f8023be5beab60fb2d97d4d1a8347

  • SHA256

    ec5f3dae3da97815daad242fe4787103ef666f5838de6fdfa3e6f1e705987d53

  • SHA512

    c4a7e81f293af060b5085f417c338e8aaaabec442d707a24b022386b4122951cbdd7ea5b35d8e77893fc107e2e289b72738ef0f9fc310a485a8de749e941f406

  • SSDEEP

    12288:kA7BOvB6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4g2:kA2q5h3q5htaSHFaZRBEYyqmaf2qwiHP

Malware Config

Targets

    • Target

      58faa4df6535a2d1146958e3717e8ab0_NeikiAnalytics.exe

    • Size

      768KB

    • MD5

      58faa4df6535a2d1146958e3717e8ab0

    • SHA1

      12fcf0aaa42f8023be5beab60fb2d97d4d1a8347

    • SHA256

      ec5f3dae3da97815daad242fe4787103ef666f5838de6fdfa3e6f1e705987d53

    • SHA512

      c4a7e81f293af060b5085f417c338e8aaaabec442d707a24b022386b4122951cbdd7ea5b35d8e77893fc107e2e289b72738ef0f9fc310a485a8de749e941f406

    • SSDEEP

      12288:kA7BOvB6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4g2:kA2q5h3q5htaSHFaZRBEYyqmaf2qwiHP

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks